0700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:34 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="952032d004b5", 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:47:36 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:37 executing program 1:
r0 = socket(0x15, 0x80005, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))

17:47:37 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
creat(0x0, 0x0)
close(r1)
socket(0x0, 0x5, 0x0)
socket(0x0, 0x5, 0x0)

17:47:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="952032d004b5", 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:47:38 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
creat(0x0, 0x0)
close(r1)
socket(0x0, 0x5, 0x0)
socket(0x0, 0x5, 0x0)

17:47:44 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r0, r1)

17:47:44 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c)
r2 = open(0x0, 0x0, 0x0)
ftruncate(r2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8482)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000740))
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r5, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)

17:47:44 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
creat(0x0, 0x0)
close(r1)
socket(0x0, 0x5, 0x0)
socket(0x0, 0x5, 0x0)

17:47:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="952032d004b5", 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:47:44 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

[  581.278322][T10982] debugfs: File '10976' in directory 'proc' already present!
17:47:44 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1)

17:47:44 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x4000000000001, 0x0, 0xffffffffffffffff)

17:47:44 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
creat(0x0, 0x0)
close(r1)
socket(0x0, 0x5, 0x0)
socket(0x0, 0x5, 0x0)

17:47:44 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x4000000000001, 0x0, 0xffffffffffffffff)

17:47:45 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x4000000000001, 0x0, 0xffffffffffffffff)

17:47:45 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, 0x0)
socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

17:47:53 executing program 4:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000180)={0x80, 0x5, 0x6})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

17:47:53 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x800010000000000d)
fcntl$notify(r3, 0x402, 0x20)

17:47:53 executing program 3:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

17:47:53 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x4000000000001, 0x0, 0xffffffffffffffff)

17:47:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
lstat(0x0, 0x0)
getpgrp(0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680))
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYRESDEC, @ANYBLOB])
getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0))
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000))
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
geteuid()
stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
socket$inet(0x2, 0x0, 0x20)
getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc, 0xc, 0x0}, 0x10000011)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, 0x0)
getpid()
getpid()
r10 = getpid()
sched_setscheduler(r10, 0x0, &(0x7f0000000380))
fstat(0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x1, 0x0, 0x0, 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0])
getresgid(0x0, 0x0, &(0x7f0000001000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
socket$inet(0x2, 0x0, 0x20)
getuid()
getgid()
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10000011)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r14 = syz_open_dev$mice(0x0, 0x0, 0x0)
dup3(r13, r14, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
getresuid(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400))
lstat(&(0x7f0000000440)='./file0\x00', 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x0, 0x0)
getpgrp(0x0)
getpid()
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
lstat(0x0, &(0x7f0000000680))
fstat(0xffffffffffffffff, &(0x7f0000000700))
socket$rxrpc(0x21, 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r16, 0x40505331, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001100))
getpid()
stat(0x0, &(0x7f00000011c0))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000))
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r17, 0x40505331, 0x0)
r18 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r18, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(0x0, 0x0, 0x0)
getuid()
getgid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = syz_open_dev$mouse(0x0, 0x0, 0x8000)
io_uring_setup(0x0, 0x0)
r20 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_EVBIT(r20, 0x40045564, 0x1)
r21 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r21, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r19, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', 0x0, 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="d52953390a1f32babca8b81b4047eb0b311b605625a2e973f51aae06f2cff1eee9e8068e257474415b69398e52568adf969ffaa3dde862c7cd5814c3d506ffda462fcf936fb75e4c47eb4c4947c071f13ca98f36460e6fc24a5a2ae916eb14f4e2bbd2ee0936f75518df7f4a0db269cbcd3ddc5733c431b862431fc5e4e320f51ddee370d0243f60b669c6b7c97ad995aef351ce3eae50ad5b1aeb1cb972738d935b187892754f3b524bba9ea0f734f883a43a1f9575813357649e251877ebc9", 0xc0, 0x8000}, {&(0x7f0000000280)="ca694e53606b297b1ad3cfcfd8cf31d893a4eeb6c738e6aad49d958e4e6c75e477ea51f51673dd36db84f26b6cc1209446ef9513c5adef4f469533f8d965de04d83e03ed391e9b8e8399562b9f9caf391e3f60c59a56d3f86c1f54b69654e3de07a75f6301e5bb2f99ffc5f4d87833b35b8ac6aa9df4e45a52f58a6c4ffac967b3df6cc6b0c05db9ee72eb521ffe4a0012a702bee83e2aee845898db69b15d4935631ad58dbe4569293c9134e22c37a9c89333", 0xb3}], 0x2, &(0x7f0000004240)=ANY=[@ANYBLOB="7461696c733d6f66662c686173683d72352c62ac1ca460fa892b66b1c5d2d047ff216c6f636b2d616c6c6f6361746f723d74657374342c6e6f7461696c2c686173683d72352c666f776e65723e9a540e2d11cc62686316b5d41c8de354358dd514e439bfd437d3b4a5476dc30a70616499b05f1e686d0c79fa03dc4a6bdb3f127d33fa76868685a4ba60b054e13e173b077b9f314af512316ba6f08a71f7b1a860301619d7ca37fdcf602f651ba9c3004b2e0c8596210720a8fae267aaaba246ffdf82d7af5e7f", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,appraise_type=imasig,smackfstransmute=$keyring&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}})
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)

17:47:53 executing program 0:
syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d", 0x2)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000640)={0x4, 0x0, [{0x8, 0x0, 0x80000001}, {0x5, 0x0, 0x3}, {0x0, 0x0, 0x5}, {0x9, 0x0, 0x1}]})
openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  590.627837][T11020] tmpfs: Unknown parameter ',005e000001
[  590.627837][T11020] 15   bond0           3     0     333300000001
[  590.627837][T11020] 15   bond0           3     0     3333ff000017
[  590.627837][T11020] 15   bond0           3     0     01005e000001
[  590.627837][T11020] 15   bond0           3     0     3333ffaaaa17
[  590.627837][T11020] 34   team_slave_0    2     0     333300000001
[  590.627837][T11020] 34   team_slave_0    2     0     01005e000001
[  590.627837][T11020] 34   team_slave_0    1     0    ,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
17:47:53 executing program 1:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"/406, @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

17:47:53 executing program 5:
socketpair(0x25, 0x1, 0x0, &(0x7f0000000000))

[  590.810586][T11030] tmpfs: Unknown parameter ',005e000001
[  590.810586][T11030] 15   bond0           3     0     333300000001
[  590.810586][T11030] 15   bond0           3     0     3333ff000017
[  590.810586][T11030] 15   bond0           3     0     01005e000001
[  590.810586][T11030] 15   bond0           3     0     3333ffaaaa17
[  590.810586][T11030] 34   team_slave_0    2     0     333300000001
[  590.810586][T11030] 34   team_slave_0    2     0     01005e000001
17:47:53 executing program 1:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

[  590.810586][T11030] 34   team_slave_0    1     0    ,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
17:47:53 executing program 3:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

17:47:54 executing program 5:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

[  591.199612][T11043] tmpfs: Unknown parameter ',005e000001
[  591.199612][T11043] 15   bond0           3     0     333300000001
[  591.199612][T11043] 15   bond0           3     0     3333ff000017
[  591.199612][T11043] 15   bond0           3     0     01005e000001
[  591.199612][T11043] 15   bond0           3     0     3333ffaaaa17
[  591.199612][T11043] 34   team_slave_0    2     0     333300000001
[  591.199612][T11043] 34   team_slave_0    2     0     01005e000001
[  591.199612][T11043] 34   team_slave_0    1     0    ,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
[  591.312348][T11047] tmpfs: Unknown parameter '  333300000001
[  591.312348][T11047] 23   veth0           1     0     333300000001
[  591.312348][T11047] 23   veth0           1     0     3333ff000018
[  591.312348][T11047] 23   veth0           1     0     01005e000001
[  591.312348][T11047] 23   veth0           1     0     3333ffaaaa18
[  591.312348][T11047] 35   veth1_to_team   1     0     333300000001
[  591.312348][T11047] 35   veth1_to_team   1     0     01005e000001
[  591.312348][T11047] 35   veth1_to_team   1     0,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
17:47:54 executing program 3:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

[  591.498582][T11050] tmpfs: Unknown parameter ',005e000001
[  591.498582][T11050] 15   bond0           3     0     333300000001
[  591.498582][T11050] 15   bond0           3     0     3333ff000017
[  591.498582][T11050] 15   bond0           3     0     01005e000001
[  591.498582][T11050] 15   bond0           3     0     3333ffaaaa17
[  591.498582][T11050] 34   team_slave_0    2     0     333300000001
[  591.498582][T11050] 34   team_slave_0    2     0     01005e000001
[  591.498582][T11050] 34   team_slave_0    1     0    ,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
17:48:06 executing program 3:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

17:48:06 executing program 5:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

17:48:06 executing program 1:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

17:48:06 executing program 4:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000180)={0x80, 0x5, 0x6})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

17:48:06 executing program 2:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

17:48:06 executing program 0:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
vmsplice(r2, &(0x7f0000000040), 0x0, 0x0)

[  603.346915][T11069] tmpfs: Unknown parameter ',005e000001
[  603.346915][T11069] 15   bond0           3     0     333300000001
[  603.346915][T11069] 15   bond0           3     0     3333ff000017
[  603.346915][T11069] 15   bond0           3     0     01005e000001
[  603.346915][T11069] 15   bond0           3     0     3333ffaaaa17
[  603.346915][T11069] 34   team_slave_0    2     0     333300000001
[  603.346915][T11069] 34   team_slave_0    2     0     01005e000001
[  603.346915][T11069] 34   team_slave_0    1     0    ,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
[  603.394695][T11072] tmpfs: Unknown parameter '  333300000001
[  603.394695][T11072] 23   veth0           1     0     333300000001
[  603.394695][T11072] 23   veth0           1     0     3333ff000018
[  603.394695][T11072] 23   veth0           1     0     01005e000001
[  603.394695][T11072] 23   veth0           1     0     3333ffaaaa18
[  603.394695][T11072] 35   veth1_to_team   1     0     333300000001
[  603.394695][T11072] 35   veth1_to_team   1     0     01005e000001
17:48:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000004000000105000600203f00000a00000000000000000500e5000007f3ff001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000203a5d0bb1feef74bcb60de801253c00000000e2ffffffff00170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

[  603.394695][T11072] 35   veth1_to_team   1     0,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
17:48:06 executing program 5:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00')
read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c3278469903c983a725770dfa9334863e362935822d12fadab5977b980e709799dc0c9a559ee631da9ac94b3fed03abde8ea79fc9921ec65a388135df3fe730831236babed93d"])
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000480)=',')

17:48:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000004000000105000600203f00000a00000000000000000500e5000007f3ff001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000203a5d0bb1feef74bcb60de801253c00000000e2ffffffff00170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

[  603.818226][T11085] tmpfs: Unknown parameter '  333300000001
[  603.818226][T11085] 23   veth0           1     0     333300000001
[  603.818226][T11085] 23   veth0           1     0     3333ff000018
[  603.818226][T11085] 23   veth0           1     0     01005e000001
[  603.818226][T11085] 23   veth0           1     0     3333ffaaaa18
[  603.818226][T11085] 35   veth1_to_team   1     0     333300000001
[  603.818226][T11085] 35   veth1_to_team   1     0     01005e000001
[  603.818226][T11085] 35   veth1_to_team   1     0,2xF™Ƀ§%w
ú“4†>6)5‚-úÚµ—{˜p—™ÜšUžæ1ÚšÉK?í«ÞŽ§ŸÉ’ÆZ8�5ß?ç0ƒ6º¾Ù'
17:48:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000004000000105000600203f00000a00000000000000000500e5000007f3ff001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000203a5d0bb1feef74bcb60de801253c00000000e2ffffffff00170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

17:48:07 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getdents64(r0, &(0x7f0000000100)=""/230, 0xe6)

17:48:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000004000000105000600203f00000a00000000000000000500e5000007f3ff001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000203a5d0bb1feef74bcb60de801253c00000000e2ffffffff00170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

17:48:07 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getdents64(r0, &(0x7f0000000100)=""/230, 0xe6)

17:48:07 executing program 2:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

17:48:07 executing program 1:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

17:48:16 executing program 4:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000180)={0x80, 0x5, 0x6})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

17:48:16 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:16 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getdents64(r0, &(0x7f0000000100)=""/230, 0xe6)

17:48:16 executing program 2:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

17:48:16 executing program 1:
pipe(&(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)})
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3)
unlink(&(0x7f0000001e00)='./bus\x00')
fanotify_init(0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)

17:48:16 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x100000000011, 0x2, 0x0)
bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
dup2(r2, r0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$sock(r0, &(0x7f0000005880)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x40000000000004e, 0x0)

17:48:17 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getdents64(r0, &(0x7f0000000100)=""/230, 0xe6)

17:48:17 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:17 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:17 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

[  618.351035][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  618.356852][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  618.430975][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  618.436782][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:48:21 executing program 2:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:21 executing program 5:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

[  619.471021][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  619.476851][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  619.482630][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  619.488386][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  619.630982][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  619.636747][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:48:24 executing program 4:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000180)={0x80, 0x5, 0x6})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

17:48:24 executing program 1:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 2:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 5:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 0:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 5:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 1:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 2:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:24 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x5, 0x2)
write$P9_RWRITE(r1, 0x0, 0xffffffffffffff3f)
creat(0x0, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8100, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x181042, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x7b)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000040)=0x10000)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, &(0x7f0000000100)='./file0\x00', r3)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

17:48:25 executing program 1:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:33 executing program 0:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:33 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:33 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x0, 0x1}, {0xf}})

17:48:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x5, 0x2)
write$P9_RWRITE(r1, 0x0, 0xffffffffffffff3f)
creat(0x0, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8100, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x181042, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x7b)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000040)=0x10000)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, &(0x7f0000000100)='./file0\x00', r3)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

17:48:33 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000000500)=@x25={0x27, @null='               \x00'}, 0x80)

17:48:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0)

17:48:33 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x41, 0x0)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000001080)=""/246)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(r2, r0)
write$binfmt_script(r1, 0x0, 0x0)

17:48:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000680)='gfs2\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)={[{@quota_account='quota=account'}, {@data_writeback='data=writeback'}], [{@smackfsdef={'smackfsdef'}}]})

17:48:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000680)='gfs2\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)={[{@quota_account='quota=account'}, {@data_writeback='data=writeback'}], [{@smackfsdef={'smackfsdef'}}]})

[  630.910983][    C1] net_ratelimit: 10 callbacks suppressed
[  630.910996][    C1] protocol 88fb is buggy, dev hsr_slave_0
17:48:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000680)='gfs2\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)={[{@quota_account='quota=account'}, {@data_writeback='data=writeback'}], [{@smackfsdef={'smackfsdef'}}]})

17:48:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x5, 0x2)
write$P9_RWRITE(r1, 0x0, 0xffffffffffffff3f)
creat(0x0, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8100, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x181042, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x7b)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000040)=0x10000)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, &(0x7f0000000100)='./file0\x00', r3)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

17:48:34 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

[  631.420560][T11203] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
17:48:40 executing program 0:
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x11, 0x7ffd, 0x8000)
fallocate(r1, 0x0, 0x0, 0xfff9)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.n\xd3!\n\x82c~\x949', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0xa7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c)
chroot(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x20011c, r2, 0x1)

17:48:40 executing program 1:
socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000004, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

17:48:40 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000680)='gfs2\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)={[{@quota_account='quota=account'}, {@data_writeback='data=writeback'}], [{@smackfsdef={'smackfsdef'}}]})

17:48:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x5, 0x2)
write$P9_RWRITE(r1, 0x0, 0xffffffffffffff3f)
creat(0x0, 0x0)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8100, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x181042, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x7b)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000040)=0x10000)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, &(0x7f0000000100)='./file0\x00', r3)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

17:48:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:41 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000100))

17:48:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108)

[  638.331414][T11225] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
17:48:41 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd2, &(0x7f0000000000), 0x3c)

17:48:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

17:48:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

[  640.751065][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  640.757118][T11241] Bluetooth: hci0: sending frame failed (-49)
[  642.830990][ T8073] Bluetooth: hci0: command 0x1001 tx timeout
[  642.837058][T11241] Bluetooth: hci0: sending frame failed (-49)
[  644.910996][   T44] Bluetooth: hci0: command 0x1009 tx timeout
17:48:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

17:48:53 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80340000055e510befccd7", 0x2e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)

17:48:53 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

[  650.626376][T11256] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  650.641528][T11256] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  650.768588][ T9896] Bluetooth: hci0: Frame reassembly failed (-84)
17:48:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80340000055e510befccd7", 0x2e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)

17:48:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x0, 0x2})

17:48:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:48:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80340000055e510befccd7", 0x2e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)

[  651.479357][T11268] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  651.491505][T11268] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  651.605023][T11275] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  651.620268][T11275] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
17:48:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80340000055e510befccd7", 0x2e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)

17:48:54 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x2)
flock(r0, 0x1)
r2 = gettid()
readv(r0, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup3(r6, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x20000000000005)
fcntl$setsig(r3, 0xa, 0x12)
fcntl$setownex(r3, 0xf, &(0x7f00002cb000)={0x0, r2})
recvmsg(r4, &(0x7f000070bfc8)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r4)
tkill(r2, 0x16)

[  651.753747][T11280] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  651.763714][T11280] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  652.840984][ T2405] Bluetooth: hci0: command 0x1003 tx timeout
[  652.847079][T11241] Bluetooth: hci0: sending frame failed (-49)
[  654.911157][   T44] Bluetooth: hci0: command 0x1001 tx timeout
[  654.917221][T11241] Bluetooth: hci0: sending frame failed (-49)
[  656.991117][ T2405] Bluetooth: hci0: command 0x1009 tx timeout
[  663.070985][ T8090] Bluetooth: hci1: command 0x1003 tx timeout
[  663.077069][ T8338] Bluetooth: hci1: sending frame failed (-49)
[  665.151004][ T2405] Bluetooth: hci1: command 0x1001 tx timeout
[  665.157069][ T8338] Bluetooth: hci1: sending frame failed (-49)
[  667.231004][ T8090] Bluetooth: hci1: command 0x1009 tx timeout
17:49:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

17:49:14 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/')
sendfile(r1, r2, 0x0, 0x1)
wait4(0x0, 0x0, 0x0, 0x0)
getpid()
tkill(0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r3, 0x0, 0xedc0)

17:49:14 executing program 3:
set_mempolicy(0x1, &(0x7f00000000c0)=0x2, 0x8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x12, 0x0, 0x0, 0x0)

17:49:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:49:14 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd1a, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0xfffffffc, 0x81}, &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r5=>r4, 0x8, 0x2, [0x0, 0x5]}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fffffff, 0x7ff}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd)
write(r6, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r6, 0x5437, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000))
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x36d)
r7 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r7)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r7, 0x12)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x9, 0x4, [{0x3ff, 0x77b4, 0x1, 0x0, 0x0, 0x100}, {0x79bb, 0x8000, 0x0, 0x0, 0x0, 0x484}, {0x9, 0x6, 0xffffffffffffffc0}, {0x3, 0x603a, 0x7, 0x0, 0x0, 0x2201}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

17:49:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

17:49:14 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00')
preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0)

[  671.546224][T11297] IPVS: ftp: loaded support on port[0] = 21
[  671.630786][T11301] syz-executor.5 (11301) used greatest stack depth: 9928 bytes left
17:49:14 executing program 3:
rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffd}, 0x0, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
io_setup(0x7, &(0x7f0000000100)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
io_submit(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r2, 0x32f, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}])

17:49:14 executing program 5:
r0 = socket$inet6(0xa, 0x400000000803, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00\x00\x00\x00\x00\x00\x00\xd7\xea\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@setlink={0x24, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}}, 0x0)

[  671.680815][ T8338] Bluetooth: hci0: sending frame failed (-49)
17:49:14 executing program 5:
syz_open_dev$video(0x0, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
unshare(0x20000)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
clone(0x34004102, 0x0, 0x0, 0x0, 0x0)

17:49:14 executing program 5:
syz_open_dev$video(0x0, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
unshare(0x20000)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
clone(0x34004102, 0x0, 0x0, 0x0, 0x0)

17:49:14 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0)
ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000000000))

[  671.993280][T11302] IPVS: ftp: loaded support on port[0] = 21
[  673.711097][ T2405] Bluetooth: hci0: command 0x1003 tx timeout
[  673.717192][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  675.791098][   T44] Bluetooth: hci0: command 0x1001 tx timeout
[  675.797138][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  677.870968][ T2405] Bluetooth: hci0: command 0x1009 tx timeout
[  686.082089][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  688.111069][ T2405] Bluetooth: hci0: command 0x1003 tx timeout
[  688.117153][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  690.191105][ T8090] Bluetooth: hci0: command 0x1001 tx timeout
[  690.197177][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  692.270972][ T2405] Bluetooth: hci0: command 0x1009 tx timeout
17:49:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

17:49:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002f02}, 0xc)

17:49:39 executing program 5:
syz_open_dev$video(0x0, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
unshare(0x20000)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
clone(0x34004102, 0x0, 0x0, 0x0, 0x0)

17:49:39 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:49:39 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:49:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)

17:49:39 executing program 5:
syz_open_dev$video(0x0, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
unshare(0x20000)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
clone(0x34004102, 0x0, 0x0, 0x0, 0x0)

17:49:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002f02}, 0xc)

[  696.524481][T11339] IPVS: ftp: loaded support on port[0] = 21
[  696.614868][ T8338] Bluetooth: hci0: sending frame failed (-49)
17:49:39 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00\x00mYRC,\xae\xc5\xb6\x9c~\x90\x0f\xeb\x0f0\x88(Y\x00\x1d+\x1az\xe4\xa85\xf3\xc5\b\xcb\xc3\xc3\xa5\xac\xb3_\xaeo\x89q\xc0u\x9as\x16\x85\xd8\x90\xc5\xb9C||\xbe\xeeoK\xbe\xf3\xae\xda\xb1\xabK&%P4x\xcd9r\xde\vQ+ \xcc\x9f\xdd@\xe5~\xf8\xb71\xa0\xc3\x1d\xf9\xe6$\x0e%<!U\xed\xc6\xee\xe5)')
getdents(r3, &(0x7f00000000c0)=""/28, 0x1c)

17:49:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002f02}, 0xc)

17:49:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b501000008020500ac14341b080003000800050f01"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x0, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:49:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002f02}, 0xc)

[  696.975486][T11357] kvm [11356]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000
[  697.263566][T11361] kvm [11356]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000
[  698.671026][ T8090] Bluetooth: hci0: command 0x1003 tx timeout
[  698.677137][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  700.751035][ T8073] Bluetooth: hci0: command 0x1001 tx timeout
[  700.757165][ T8338] Bluetooth: hci0: sending frame failed (-49)
[  702.831083][ T8090] Bluetooth: hci0: command 0x1009 tx timeout
17:49:50 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:49:50 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x99a1, 0x20000000000036, 0x829, 0x0, 0x0, {0x2, 0x1000000, 0x1000000}, [@nested={0x2c7, 0x0, [@typed={0x9989, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0)

17:49:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b501000008020500ac14341b080003000800050f01"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x0, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:49:50 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:49:50 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup2(r1, r2)
r4 = fcntl$dupfd(r3, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @loopback}, 0x8)

17:49:50 executing program 0:
r0 = socket(0xa, 0x2400000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000046, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)

[  707.842436][T11371] IPVS: ftp: loaded support on port[0] = 21
17:49:50 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
close(r0)

[  707.971047][T11378] netlink: zone id is out of range
[  707.973618][T11369] kvm [11367]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000
[  707.976352][T11378] netlink: zone id is out of range
[  707.990587][T11378] netlink: zone id is out of range
[  707.996350][T11378] netlink: del zone limit has 4 unknown bytes
17:49:51 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
close(r0)

17:49:51 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
close(r0)

[  708.392667][T11387] netlink: zone id is out of range
[  708.397836][T11387] netlink: zone id is out of range
[  708.402977][T11387] netlink: zone id is out of range
[  708.408799][T11387] netlink: del zone limit has 4 unknown bytes
17:49:51 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
close(r0)

17:49:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(r0, 0x4, 0x42000)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000000))

17:49:51 executing program 1:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:49:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:49:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b501000008020500ac14341b080003000800050f01"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x0, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:49:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(r0, 0x4, 0x42000)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000000))

[  708.790055][T11403] IPVS: ftp: loaded support on port[0] = 21
[  708.849113][T11400] kvm [11399]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000
[  713.957805][T11414] IPVS: ftp: loaded support on port[0] = 21
17:50:00 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54)

17:50:00 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(r0, 0x4, 0x42000)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000000))

17:50:04 executing program 0:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b501000008020500ac14341b080003000800050f01"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x0, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:50:04 executing program 2:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:04 executing program 1:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:04 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(r0, 0x4, 0x42000)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000000))

[  721.369073][T11430] kvm [11425]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000
17:50:04 executing program 3:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:04 executing program 1:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:04 executing program 2:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:04 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x3ed, 0x2}, 0xe)

17:50:04 executing program 1:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
getgid()
geteuid()
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000000000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x8b, 0x4, 0x0, 0x1b1)
fstat(r3, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
socket(0xa, 0x80001, 0x0)
fcntl$getownex(r4, 0x10, 0x0)
r5 = socket(0xa, 0x80001, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000b34ff8), &(0x7f0000b34ffc)=0xc)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, &(0x7f0000000640))
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r6, &(0x7f0000000d80)="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", 0x480, 0x0, 0x0, 0x0)
socket(0x0, 0x2, 0x0)

17:50:05 executing program 3:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:09 executing program 0:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:09 executing program 5:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
getpgid(0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

17:50:09 executing program 2:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:09 executing program 1:
open(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000004e40)='./bus\x00')

17:50:09 executing program 3:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

[  726.506036][T11474] Process accounting resumed
17:50:09 executing program 1:
open(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000004e40)='./bus\x00')

17:50:09 executing program 5:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
getpgid(0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

[  726.607368][T11473] Process accounting resumed
17:50:09 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30}, 0x30)

17:50:09 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7b, &(0x7f00000000c0), 0x10)
r4 = dup2(r1, r3)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f00000000c0)=0x4)
dup3(r4, r2, 0x0)

17:50:09 executing program 1:
open(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000004e40)='./bus\x00')

[  726.817407][T11480] Process accounting resumed
[  726.948330][T11489] Process accounting resumed
17:50:12 executing program 4:
prctl$PR_SET_SECUREBITS(0x1c, 0xf)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0xe20c4, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8)
truncate(&(0x7f0000000080)='./file0\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x2)

17:50:12 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4$inet(r1, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000015)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

17:50:18 executing program 0:
mkdir(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x4}}, 0x18)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4)
tkill(0x0, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close(r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x2, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x7, &(0x7f0000000300)=""/7}, {0x2000, 0x0, 0x0}, {0x0, 0x1000, &(0x7f0000001700)=""/4096}, {0x0, 0x10, &(0x7f0000000400)=""/16}]})
close(r2)
dup3(r1, r2, 0x100000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil)

17:50:18 executing program 5:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
getpgid(0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

17:50:18 executing program 1:
open(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000004e40)='./bus\x00')

17:50:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x5000000}]}]}, 0x28}}, 0x0)

17:50:18 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xc, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd80, &(0x7f0000000280)=[{&(0x7f0000000000)="1400000052008102a00f80854a36b8ab1c959916", 0x14}], 0x1}, 0x0)

17:50:18 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140), 0x4)

[  735.732943][T11508] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  735.748729][T11510] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
17:50:18 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4)

17:50:18 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80648c63940d0824fc00100002400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0)

[  735.819135][T11507] Process accounting resumed
17:50:18 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$NBD_SET_SOCK(r3, 0xab00, r5)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

17:50:18 executing program 5:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
getpgid(0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

[  735.946997][T11520] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  736.030140][T11526] block nbd2: shutting down sockets
[  736.086822][T11530] block nbd2: shutting down sockets
17:50:25 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6cb3210000000000, 0x0, 0x0, 0x0, 0x6d}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x100b0, &(0x7f000000cf3d)=""/195}, 0x48)

17:50:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x11, 0xb, &(0x7f0000000000)={@empty, @loopback}, 0x10)

17:50:32 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8)
fcntl$notify(r2, 0x10, 0x710000)

17:50:32 executing program 3:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0)
write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f020000002a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3)

17:50:32 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=0x0)

17:50:32 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

17:50:32 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0)
ioctl$KDMKTONE(r0, 0x5385, 0x4000000000000006)

17:50:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  749.279885][T11542] dlm: no locking on control device
[  749.292212][   T26] audit: type=1800 audit(1572889832.285:94): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="+pro" dev="sda1" ino=16753 res=0
17:50:32 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x1cc)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10)

[  749.379416][   T26] audit: type=1800 audit(1572889832.365:95): pid=11550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="+pro" dev="sda1" ino=16753 res=0
[  749.442342][T11555] device syz_tun entered promiscuous mode
[  749.449080][T11554] device syz_tun left promiscuous mode
17:50:32 executing program 2:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000100)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x1f)

17:50:32 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

[  749.493253][T11556] device syz_tun entered promiscuous mode
[  749.513290][T11556] device syz_tun left promiscuous mode
[  749.520854][T11555] device syz_tun entered promiscuous mode
[  749.534484][T11554] device syz_tun left promiscuous mode
17:50:32 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

[  749.616560][T11560] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  749.658495][T11560] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  749.683047][   T26] audit: type=1800 audit(1572889832.665:96): pid=11561 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="+pro" dev="sda1" ino=16746 res=0
[  749.728033][   T26] audit: type=1800 audit(1572889832.675:97): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="+pro" dev="sda1" ino=16754 res=0
17:50:39 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:39 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

17:50:39 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

17:50:39 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8)
fcntl$notify(r2, 0x10, 0x710000)

[  756.476006][   T26] audit: type=1800 audit(1572889839.465:98): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="+pro" dev="sda1" ino=16774 res=0
[  756.564197][   T26] audit: type=1800 audit(1572889839.505:99): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="+pro" dev="sda1" ino=16775 res=0
17:50:39 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

17:50:39 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev+loop#\x00', 0x0, 0x10000)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0))
r2 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0xea, 0x7f)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x387)
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4)

17:50:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  756.943225][   T26] audit: type=1800 audit(1572889839.935:100): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="+pro" dev="sda1" ino=16774 res=0
[  757.086425][   T26] audit: type=1800 audit(1572889840.075:101): pid=11588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="+pro" dev="sda1" ino=16767 res=0
17:50:40 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000180)=[{0x10, 0x84}], 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x111080, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300), 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x2000)=nil)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}]}, 0x44, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6ab4e41a"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:50:40 executing program 5:
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x30)
tee(r2, r0, 0x100000001, 0x0)

17:50:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  757.828179][T11591] overlayfs: workdir and upperdir must reside under the same mount
[  757.952340][T11593] overlayfs: workdir and upperdir must reside under the same mount
17:50:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb904021d65ef0b007c05e87c55a1bc0009000700069903000000050005000200812fa80012000f0063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0)

17:50:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:48 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000180)=[{0x10, 0x84}], 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x111080, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300), 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x2000)=nil)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}]}, 0x44, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6ab4e41a"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:50:48 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:48 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8)
fcntl$notify(r2, 0x10, 0x710000)

17:50:48 executing program 5:
tkill(0xffffffffffffffff, 0x33)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="5bb56cb18359948fda643a3a5d2c303a3a363a00"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)

[  765.915039][T11616] overlayfs: conflicting lowerdir path
17:50:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

17:50:49 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

[  766.129935][T11621] libceph: resolve 'µl±ƒY”�Úd' (ret=-3): failed
[  766.140943][T11621] libceph: parse_ips bad ip '[µl±ƒY”�Úd::],0::6'
17:50:49 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000180)=[{0x10, 0x84}], 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x111080, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300), 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x2000)=nil)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}]}, 0x44, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6ab4e41a"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:50:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x35, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}}, 0x0)

17:50:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[  766.495202][T11638] overlayfs: workdir and upperdir must reside under the same mount
17:50:59 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

17:50:59 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

17:50:59 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

17:50:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

17:50:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8)
fcntl$notify(r2, 0x10, 0x710000)

17:50:59 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000180)=[{0x10, 0x84}], 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x111080, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300), 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x2000)=nil)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}]}, 0x44, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6ab4e41a"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:50:59 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

[  776.408079][T11651] overlayfs: workdir and upperdir must reside under the same mount
17:50:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

17:50:59 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

17:50:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

17:50:59 executing program 1:
set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8)
getcwd(&(0x7f0000000100)=""/219, 0xdb)

17:50:59 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_pts(r1, 0x4000000000000002)
sendfile(r5, r0, 0x0, 0x6f0a77bd)

17:51:00 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

17:51:08 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x40}, {0x80000006}]}, 0x10)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r3, 0x0, r5, 0x0, 0x30005, 0x0)

17:51:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

17:51:08 executing program 1:
set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8)
getcwd(&(0x7f0000000100)=""/219, 0xdb)

17:51:08 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_pts(r1, 0x4000000000000002)
sendfile(r5, r0, 0x0, 0x6f0a77bd)

17:51:08 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3, 0x80000000000000d5, [0x0]}, 0x2de)

17:51:08 executing program 4:
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@creator={'creator', 0x3d, "05000100"}}]})

17:51:08 executing program 1:
set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8)
getcwd(&(0x7f0000000100)=""/219, 0xdb)

17:51:08 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_pts(r1, 0x4000000000000002)
sendfile(r5, r0, 0x0, 0x6f0a77bd)

17:51:08 executing program 1:
set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8)
getcwd(&(0x7f0000000100)=""/219, 0xdb)

17:51:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = open(0x0, 0x68042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r4, 0x0, 0x0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0), 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

17:51:08 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_pts(r1, 0x4000000000000002)
sendfile(r5, r0, 0x0, 0x6f0a77bd)

[  792.110976][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  792.116819][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  792.122575][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  792.128305][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  792.270974][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  792.276805][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  792.510970][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  792.516814][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:51:15 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xd0b, 0x0, &(0x7f0000000100)="d8e9247800100000000000000e99", 0x0, 0x67f}, 0x28)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000001ac0)={0x5, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x4)

17:51:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700ef"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000020000008504000000000000050080"])

17:51:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:19 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xd0b, 0x0, &(0x7f0000000100)="d8e9247800100000000000000e99", 0x0, 0x67f}, 0x28)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000001ac0)={0x5, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x4)

17:51:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:19 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xd0b, 0x0, &(0x7f0000000100)="d8e9247800100000000000000e99", 0x0, 0x67f}, 0x28)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000001ac0)={0x5, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x4)

17:51:20 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xd0b, 0x0, &(0x7f0000000100)="d8e9247800100000000000000e99", 0x0, 0x67f}, 0x28)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000001ac0)={0x5, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x4)

17:51:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:27 executing program 0:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}], 0x1, 0x8000)
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfffffe04)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

17:51:27 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pause()

17:51:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x89c000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x4, 0x3, 0x4, 0x1})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
unshare(0x0)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000800000000000000000003000b3c0600000000000000000000004000000000000000270200000000000000000000ec0c380000000000000000000000000001000000ff0f0000000000000000000000000000000000000001000000000000000000000000000000000000ff7f00"/888], 0x378)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x67})

17:51:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:29 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e2)

17:51:29 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r2, r1, 0x0, 0x961c)

17:51:29 executing program 1:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:29 executing program 5:
socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000001b40))
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:51:29 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x890b, &(0x7f0000000000)={0x3, @null})

17:51:29 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1a9}, 0x4, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x20005980, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

17:51:40 executing program 0:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}], 0x1, 0x8000)
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfffffe04)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

17:51:40 executing program 1:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:40 executing program 2:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x31, 0x0, 0x0)

17:51:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x4002)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x0, &(0x7f00000001c0))
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002)
io_setup(0x0, &(0x7f0000000040))
io_setup(0x0, &(0x7f0000000040))
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = creat(0x0, 0x40)
io_setup(0xb, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000), 0x200a00}])
r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

17:51:42 executing program 3:
r0 = socket$l2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x3a)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x5, 0x20000000, 0x1c7)

17:51:42 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101002)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x8000001, 0x8e, 0x2}], 0x13c)

17:51:42 executing program 2:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:42 executing program 1:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:42 executing program 2:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:42 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000001200)=""/4103, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

17:51:42 executing program 2:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:51:49 executing program 0:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}], 0x1, 0x8000)
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfffffe04)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

17:51:49 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x980001})
close(r0)

17:51:49 executing program 1:
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x1d7)
r1 = socket$inet_sctp(0x2, 0x801, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b29cded00c4853d5a731e9df7a2a7920956a42c26c5ba1bcef35af6678e7ce164f9c3ae701f82068dfa5862e12e7b347cd1bc32b8c1bd664debcb0907be346766425487c99fa1a983f7a03113c06faf8152c333e2a4d2a9f94c26e3e940f53c94287c345e24cf842f3e7dd31004d4c072bf11b1b6b69f4a73df9899c379368aac073c9056814555e31f23364225519da6c52fc20955d03270c5d7006d522262355b0c000891ce502b8865725682f94d28b4a1b023057e775992718c8ef52d460a524714fd8ecdc24ebc48867", 0xcc}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

17:51:49 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000001200)=""/4103, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

17:51:51 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000001200)=""/4103, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

17:51:51 executing program 2:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:51:51 executing program 4:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:51:51 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x980001})
close(r0)

17:51:51 executing program 1:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:51:51 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x980001})
close(r0)

17:51:51 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000001200)=""/4103, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

17:51:52 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x980001})
close(r0)

17:51:57 executing program 0:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}], 0x1, 0x8000)
write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfffffe04)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

17:51:57 executing program 2:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:51:57 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001}, [@ldst={0xffffffbd, 0x2, 0x4f04}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195}, 0x48)

17:51:57 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000))

17:51:57 executing program 1:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:51:57 executing program 5:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:03 executing program 4:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:52:03 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="17000000560007031dfffd946f61050007000000670000", 0x17}], 0x1}, 0x0)

17:52:03 executing program 1:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:52:03 executing program 5:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:03 executing program 2:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:52:03 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:06 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:06 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0))

17:52:06 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8000)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

17:52:06 executing program 0:
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x4d304}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f00000003c0)="24000000101407031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdd80b40000000140003000029ec2400020c", 0x43}], 0x1}, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000200)={0xa, 0xf, 0x15, 0x15, 0x0, 0x0, 0x0, 0x7d, 0x1})
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x118c29b3b2bcc4a4)
shmdt(0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = semget$private(0x0, 0x2, 0x0)
semop(r2, &(0x7f0000000000), 0x0)
semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000240)=""/35)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@null='               \x00', 0x2, 'teql0\x00'})

17:52:06 executing program 5:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x4}]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060000fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0)

[  844.141558][T11933] netlink: 103 bytes leftover after parsing attributes in process `syz-executor.1'.
[  844.152738][T11934] netlink: 103 bytes leftover after parsing attributes in process `syz-executor.1'.
17:52:16 executing program 4:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0xde60100)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev}, 0x80)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1)
recvfrom(r1, &(0x7f00000001c0)=""/36, 0x24, 0x40000000, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0xd, 0x0, 0x6, 0x6, @dev={[], 0x23}}, 0x80)
r2 = socket(0x15, 0x80005, 0x0)
getsockname$packet(r2, &(0x7f0000004040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x10008000, &(0x7f00000040c0)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

17:52:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000280))

17:52:16 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:16 executing program 5:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xccda, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0xffff, 0x0, 0x7})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$FIONREAD(r2, 0x5412, &(0x7f0000000240))
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140))
getegid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0xff, @loopback}}}, 0x84)
lstat(0x0, &(0x7f0000000b00))
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
lstat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+30000000}}, &(0x7f0000000100))
lstat(0x0, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getegid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80))

17:52:16 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8000)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

17:52:16 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000200)={{0xffffff92}, {0xffffffc0}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

17:52:16 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000000180)=[{0x60}, {0x6}]}, 0x10)

17:52:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x800000000080002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001300fdff00000000004f97ce13000000"], 0x14}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x49249249249266b, 0x0)

17:52:16 executing program 3:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

17:52:16 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x100)

17:52:16 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)

17:52:17 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  854.252442][T11971] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
17:52:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x29, 0x19, 0x0, 0x300)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r0, r2)
dup3(r4, r1, 0x0)

17:52:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4000000000c)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1f0000000203193b000007000000068100023b05090002000000403902aef5", 0x1f}], 0x1)

17:52:27 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

17:52:27 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8000)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

17:52:27 executing program 3:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

17:52:27 executing program 0:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

17:52:27 executing program 1:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

17:52:28 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  865.285461][T11996] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  865.296133][T11996] CPU: 0 PID: 11996 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0
[  865.304025][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  865.314079][T11996] Call Trace:
[  865.317388][T11996]  dump_stack+0xf5/0x159
[  865.321650][T11996]  dump_header+0xaa/0x449
[  865.325995][T11996]  oom_kill_process.cold+0x10/0x15
[  865.331142][T11996]  out_of_memory+0x231/0xa00
[  865.335772][T11996]  ? preempt_schedule_common+0x37/0x90
[  865.341249][T11996]  ? preempt_schedule+0x30/0x40
[  865.346118][T11996]  ? ___preempt_schedule+0x16/0x20
[  865.351244][T11996]  mem_cgroup_out_of_memory+0x128/0x150
[  865.356840][T11996]  memory_max_write+0x17b/0x250
[  865.361705][T11996]  cgroup_file_write+0x119/0x320
[  865.366649][T11996]  ? high_work_func+0x30/0x30
[  865.371326][T11996]  ? kernfs_get_active+0x9b/0xd0
[  865.376283][T11996]  kernfs_fop_write+0x1f4/0x2e0
[  865.381136][T11996]  ? cgroup_css.part.0+0x90/0x90
[  865.386077][T11996]  __vfs_write+0x67/0xc0
[  865.390343][T11996]  ? kernfs_seq_show+0xe0/0xe0
[  865.395115][T11996]  vfs_write+0x18a/0x390
[  865.399373][T11996]  ksys_write+0xd5/0x1b0
[  865.403630][T11996]  __x64_sys_write+0x4c/0x60
[  865.408234][T11996]  do_syscall_64+0xcc/0x370
[  865.412749][T11996]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  865.418644][T11996] RIP: 0033:0x45a219
[  865.422551][T11996] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  865.442150][T11996] RSP: 002b:00007f8d2524fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  865.450560][T11996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  865.458530][T11996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  865.466495][T11996] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  865.474464][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d252506d4
[  865.482434][T11996] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
17:52:28 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  865.538692][T11996] memory: usage 2640kB, limit 0kB, failcnt 0
[  865.546441][T11996] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  865.553942][T11996] Memory cgroup stats for /syz1:
[  865.556286][T11996] anon 2363392
[  865.556286][T11996] file 0
[  865.556286][T11996] kernel_stack 36864
[  865.556286][T11996] slab 237568
[  865.556286][T11996] sock 0
[  865.556286][T11996] shmem 0
[  865.556286][T11996] file_mapped 0
[  865.556286][T11996] file_dirty 0
[  865.556286][T11996] file_writeback 0
[  865.556286][T11996] anon_thp 2097152
[  865.556286][T11996] inactive_anon 0
[  865.556286][T11996] active_anon 2277376
[  865.556286][T11996] inactive_file 135168
[  865.556286][T11996] active_file 0
[  865.556286][T11996] unevictable 0
[  865.556286][T11996] slab_reclaimable 0
[  865.556286][T11996] slab_unreclaimable 237568
[  865.556286][T11996] pgfault 14091
[  865.556286][T11996] pgmajfault 0
[  865.556286][T11996] workingset_refault 0
[  865.556286][T11996] workingset_activate 0
[  865.556286][T11996] workingset_nodereclaim 0
[  865.556286][T11996] pgrefill 0
[  865.556286][T11996] pgscan 0
[  865.556286][T11996] pgsteal 0
[  865.556286][T11996] pgactivate 0
[  865.668079][T11996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11995,uid=0
[  865.684436][T11996] Memory cgroup out of memory: Killed process 11995 (syz-executor.1) total-vm:72584kB, anon-rss:2160kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000
[  865.708383][ T1062] oom_reaper: reaped process 11995 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB
17:52:28 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8000)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

17:52:28 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:28 executing program 3:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

[  866.253473][T12020] overlayfs: workdir and upperdir must reside under the same mount
[  866.913494][T12023] overlayfs: workdir and upperdir must reside under the same mount
17:52:38 executing program 3:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

17:52:38 executing program 1:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

17:52:38 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:38 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

17:52:38 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:38 executing program 0:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

[  875.511082][ T8057] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0
[  875.537259][ T8057] CPU: 0 PID: 8057 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0
[  875.545116][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  875.555172][ T8057] Call Trace:
[  875.558482][ T8057]  dump_stack+0xf5/0x159
[  875.562735][ T8057]  dump_header+0xaa/0x449
[  875.567079][ T8057]  oom_kill_process.cold+0x10/0x15
[  875.572207][ T8057]  out_of_memory+0x231/0xa00
[  875.576856][ T8057]  mem_cgroup_out_of_memory+0x128/0x150
[  875.582426][ T8057]  try_charge+0xb3a/0xbc0
[  875.586785][ T8057]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  875.592338][ T8057]  cache_grow_begin+0x3ed/0x670
[  875.597203][ T8057]  fallback_alloc+0x161/0x1f0
[  875.601965][ T8057]  ____cache_alloc_node+0x1b1/0x1c0
[  875.607169][ T8057]  ? debug_smp_processor_id+0x4c/0x172
[  875.612643][ T8057]  kmem_cache_alloc_node+0xbb/0x660
[  875.617908][ T8057]  copy_process+0x2dd/0x3b50
[  875.622519][ T8057]  ? __handle_mm_fault+0x84e/0x2c70
[  875.627740][ T8057]  _do_fork+0xfe/0x6e0
[  875.631829][ T8057]  ? __read_once_size+0x5a/0xe0
[  875.636763][ T8057]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  875.642518][ T8057]  ? _copy_to_user+0x84/0xb0
[  875.647129][ T8057]  __x64_sys_clone+0x12b/0x160
[  875.651978][ T8057]  do_syscall_64+0xcc/0x370
[  875.656506][ T8057]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  875.657787][T12040] overlayfs: conflicting lowerdir path
[  875.662397][ T8057] RIP: 0033:0x4587ea
[  875.662501][ T8057] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[  875.662533][ T8057] RSP: 002b:00007ffd19e55880 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  875.699884][ T8057] RAX: ffffffffffffffda RBX: 00007ffd19e55880 RCX: 00000000004587ea
[  875.707862][ T8057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  875.715905][ T8057] RBP: 00007ffd19e558c0 R08: 0000000000000001 R09: 00000000016c8940
[  875.723909][ T8057] R10: 00000000016c8c10 R11: 0000000000000246 R12: 0000000000000001
[  875.731892][ T8057] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd19e55910
[  875.809956][ T8057] memory: usage 240kB, limit 0kB, failcnt 16
[  875.816068][ T8057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  875.826518][ T8057] Memory cgroup stats for /syz1:
[  875.826721][ T8057] anon 73728
[  875.826721][ T8057] file 0
[  875.826721][ T8057] kernel_stack 36864
[  875.826721][ T8057] slab 102400
[  875.826721][ T8057] sock 0
[  875.826721][ T8057] shmem 0
[  875.826721][ T8057] file_mapped 0
[  875.826721][ T8057] file_dirty 0
[  875.826721][ T8057] file_writeback 0
[  875.826721][ T8057] anon_thp 0
[  875.826721][ T8057] inactive_anon 0
[  875.826721][ T8057] active_anon 73728
[  875.826721][ T8057] inactive_file 135168
[  875.826721][ T8057] active_file 0
[  875.826721][ T8057] unevictable 0
[  875.826721][ T8057] slab_reclaimable 0
[  875.826721][ T8057] slab_unreclaimable 102400
[  875.826721][ T8057] pgfault 14091
[  875.826721][ T8057] pgmajfault 0
[  875.826721][ T8057] workingset_refault 0
[  875.826721][ T8057] workingset_activate 0
[  875.826721][ T8057] workingset_nodereclaim 0
[  875.826721][ T8057] pgrefill 33
[  875.826721][ T8057] pgscan 33
[  875.826721][ T8057] pgsteal 0
[  875.826721][ T8057] pgactivate 33
[  875.871203][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  875.926764][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  875.968664][ T8057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8057,uid=0
[  875.993551][ T8057] Memory cgroup out of memory: Killed process 8057 (syz-executor.1) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0
[  876.023020][T12036] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  876.033512][ T1062] oom_reaper: reaped process 8057 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
[  876.050889][T12036] CPU: 1 PID: 12036 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  876.058792][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.068842][T12036] Call Trace:
[  876.072146][T12036]  dump_stack+0xf5/0x159
[  876.076401][T12036]  dump_header+0xaa/0x449
[  876.080757][T12036]  oom_kill_process.cold+0x10/0x15
[  876.085879][T12036]  out_of_memory+0x231/0xa00
[  876.090594][T12036]  mem_cgroup_out_of_memory+0x128/0x150
[  876.096157][T12036]  memory_max_write+0x17b/0x250
[  876.101023][T12036]  cgroup_file_write+0x119/0x320
[  876.105968][T12036]  ? high_work_func+0x30/0x30
[  876.110652][T12036]  ? kernfs_get_active+0x9b/0xd0
[  876.115601][T12036]  kernfs_fop_write+0x1f4/0x2e0
[  876.120457][T12036]  ? cgroup_css.part.0+0x90/0x90
[  876.125411][T12036]  __vfs_write+0x67/0xc0
[  876.129663][T12036]  ? kernfs_seq_show+0xe0/0xe0
[  876.134439][T12036]  vfs_write+0x18a/0x390
[  876.138685][T12036]  ksys_write+0xd5/0x1b0
[  876.143037][T12036]  __x64_sys_write+0x4c/0x60
[  876.147636][T12036]  do_syscall_64+0xcc/0x370
[  876.152153][T12036]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  876.158048][T12036] RIP: 0033:0x45a219
[  876.162394][T12036] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  876.182007][T12036] RSP: 002b:00007f0c693d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  876.190430][T12036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  876.198408][T12036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  876.206386][T12036] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  876.214361][T12036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c693da6d4
[  876.222326][T12036] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  876.234431][T12036] memory: usage 21816kB, limit 0kB, failcnt 0
[  876.240710][T12036] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  876.248291][T12036] Memory cgroup stats for /syz2:
[  876.251189][T12036] anon 21471232
[  876.251189][T12036] file 0
[  876.251189][T12036] kernel_stack 73728
[  876.251189][T12036] slab 311296
[  876.251189][T12036] sock 0
[  876.251189][T12036] shmem 69632
[  876.251189][T12036] file_mapped 0
[  876.251189][T12036] file_dirty 0
[  876.251189][T12036] file_writeback 0
[  876.251189][T12036] anon_thp 20971520
[  876.251189][T12036] inactive_anon 0
[  876.251189][T12036] active_anon 21385216
[  876.251189][T12036] inactive_file 0
[  876.251189][T12036] active_file 0
[  876.251189][T12036] unevictable 0
[  876.251189][T12036] slab_reclaimable 135168
[  876.251189][T12036] slab_unreclaimable 176128
[  876.251189][T12036] pgfault 27687
[  876.251189][T12036] pgmajfault 0
[  876.251189][T12036] workingset_refault 0
[  876.251189][T12036] workingset_activate 0
[  876.251189][T12036] workingset_nodereclaim 0
[  876.251189][T12036] pgrefill 104
[  876.251189][T12036] pgscan 105
[  876.251189][T12036] pgsteal 34
[  876.251189][T12036] pgactivate 66
[  876.346823][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  876.347279][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  876.361070][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  876.366834][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:52:39 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:39 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:39 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  876.430740][T12036] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11682,uid=0
[  876.447454][T12036] Memory cgroup out of memory: Killed process 11682 (syz-executor.2) total-vm:73112kB, anon-rss:16572kB, file-rss:35828kB, shmem-rss:0kB, UID:0 pgtables:163840kB oom_score_adj:1000
[  876.467330][ T1062] oom_reaper: reaped process 11682 (syz-executor.2), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB
[  876.527869][ T8059] syz-executor.2 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0
[  876.552674][ T8059] CPU: 1 PID: 8059 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  876.560501][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.570548][ T8059] Call Trace:
[  876.573900][ T8059]  dump_stack+0xf5/0x159
[  876.578156][ T8059]  dump_header+0xaa/0x449
[  876.582623][ T8059]  oom_kill_process.cold+0x10/0x15
[  876.587923][ T8059]  out_of_memory+0x231/0xa00
[  876.592618][ T8059]  mem_cgroup_out_of_memory+0x128/0x150
[  876.598226][ T8059]  try_charge+0xb3a/0xbc0
[  876.602571][ T8059]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  876.608043][ T8059]  cache_grow_begin+0x3ed/0x670
[  876.612932][ T8059]  fallback_alloc+0x161/0x1f0
[  876.617676][ T8059]  ____cache_alloc_node+0x1b1/0x1c0
[  876.622871][ T8059]  ? debug_smp_processor_id+0x4c/0x172
[  876.628329][ T8059]  kmem_cache_alloc+0x179/0x5d0
[  876.633175][ T8059]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  876.639415][ T8059]  ? ext4_free_in_core_inode+0x50/0x50
[  876.644879][ T8059]  ext4_alloc_inode+0x45/0x390
[  876.649639][ T8059]  alloc_inode+0x48/0x130
[  876.653965][ T8059]  new_inode_pseudo+0x35/0xe0
[  876.658645][ T8059]  new_inode+0x28/0x50
[  876.662760][ T8059]  __ext4_new_inode+0x224/0x2ec0
[  876.667696][ T8059]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  876.674047][ T8059]  ? __dquot_initialize+0x2f5/0x6b0
[  876.679331][ T8059]  ext4_mkdir+0x289/0x820
[  876.683669][ T8059]  vfs_mkdir+0x283/0x390
[  876.687917][ T8059]  do_mkdirat+0x1ac/0x1f0
[  876.692243][ T8059]  __x64_sys_mkdir+0x40/0x50
[  876.696828][ T8059]  do_syscall_64+0xcc/0x370
[  876.701340][ T8059]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  876.707294][ T8059] RIP: 0033:0x459637
[  876.711249][ T8059] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  876.730850][ T8059] RSP: 002b:00007ffcf00aa6f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
[  876.739286][ T8059] RAX: ffffffffffffffda RBX: 00000000000d5f4a RCX: 0000000000459637
[  876.747250][ T8059] RDX: 00007ffcf00aa745 RSI: 00000000000001ff RDI: 00007ffcf00aa740
[  876.755209][ T8059] RBP: 00000000000001f8 R08: 0000000000000000 R09: 0000000000000005
[  876.763170][ T8059] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000018
[  876.771136][ T8059] R13: 00007ffcf00aa730 R14: 00000000000d5bd3 R15: 00007ffcf00aa740
[  876.792299][ T8059] memory: usage 2772kB, limit 0kB, failcnt 12
[  876.799533][ T8059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  876.806510][ T8059] Memory cgroup stats for /syz2:
[  876.806659][ T8059] anon 2437120
[  876.806659][ T8059] file 0
[  876.806659][ T8059] kernel_stack 73728
[  876.806659][ T8059] slab 311296
[  876.806659][ T8059] sock 0
[  876.806659][ T8059] shmem 69632
[  876.806659][ T8059] file_mapped 0
[  876.806659][ T8059] file_dirty 0
[  876.806659][ T8059] file_writeback 0
[  876.806659][ T8059] anon_thp 2097152
[  876.806659][ T8059] inactive_anon 0
[  876.806659][ T8059] active_anon 2269184
[  876.806659][ T8059] inactive_file 0
[  876.806659][ T8059] active_file 0
[  876.806659][ T8059] unevictable 0
[  876.806659][ T8059] slab_reclaimable 135168
[  876.806659][ T8059] slab_unreclaimable 176128
[  876.806659][ T8059] pgfault 27687
[  876.806659][ T8059] pgmajfault 0
[  876.806659][ T8059] workingset_refault 0
[  876.806659][ T8059] workingset_activate 0
[  876.806659][ T8059] workingset_nodereclaim 0
[  876.806659][ T8059] pgrefill 137
17:52:39 executing program 1:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  876.806659][ T8059] pgscan 138
[  876.806659][ T8059] pgsteal 34
[  876.806659][ T8059] pgactivate 99
[  876.902510][ T8059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11644,uid=0
[  876.919041][ T8059] Memory cgroup out of memory: Killed process 11644 (syz-executor.2) total-vm:72980kB, anon-rss:2228kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  877.140677][ T8059] syz-executor.2 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0
[  877.293049][ T8059] CPU: 0 PID: 8059 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  877.300896][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  877.310951][ T8059] Call Trace:
[  877.314312][ T8059]  dump_stack+0xf5/0x159
[  877.318681][ T8059]  dump_header+0xaa/0x449
[  877.323022][ T8059]  oom_kill_process.cold+0x10/0x15
[  877.328221][ T8059]  out_of_memory+0x231/0xa00
[  877.332832][ T8059]  mem_cgroup_out_of_memory+0x128/0x150
[  877.338400][ T8059]  try_charge+0xb3a/0xbc0
17:52:40 executing program 1:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  877.342754][ T8059]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  877.348277][ T8059]  cache_grow_begin+0x3ed/0x670
[  877.353138][ T8059]  fallback_alloc+0x161/0x1f0
[  877.357844][ T8059]  ____cache_alloc_node+0x1b1/0x1c0
[  877.363044][ T8059]  ? debug_smp_processor_id+0x4c/0x172
[  877.368561][ T8059]  kmem_cache_alloc+0x179/0x5d0
[  877.373429][ T8059]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  877.379687][ T8059]  ? ext4_free_in_core_inode+0x50/0x50
[  877.385204][ T8059]  ext4_alloc_inode+0x45/0x390
[  877.389987][ T8059]  alloc_inode+0x48/0x130
[  877.394322][ T8059]  new_inode_pseudo+0x35/0xe0
[  877.399009][ T8059]  new_inode+0x28/0x50
[  877.403087][ T8059]  __ext4_new_inode+0x224/0x2ec0
[  877.408108][ T8059]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  877.414353][ T8059]  ? __dquot_initialize+0x2f5/0x6b0
[  877.419570][ T8059]  ext4_mkdir+0x289/0x820
[  877.423949][ T8059]  vfs_mkdir+0x283/0x390
[  877.428238][ T8059]  do_mkdirat+0x1ac/0x1f0
[  877.432582][ T8059]  __x64_sys_mkdir+0x40/0x50
[  877.437257][ T8059]  do_syscall_64+0xcc/0x370
[  877.441774][ T8059]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  877.447664][ T8059] RIP: 0033:0x459637
[  877.451570][ T8059] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  877.471177][ T8059] RSP: 002b:00007ffcf00aa6f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
[  877.479593][ T8059] RAX: ffffffffffffffda RBX: 00000000000d5f4a RCX: 0000000000459637
[  877.487565][ T8059] RDX: 00007ffcf00aa745 RSI: 00000000000001ff RDI: 00007ffcf00aa740
[  877.495671][ T8059] RBP: 00000000000001f8 R08: 0000000000000000 R09: 0000000000000005
[  877.503648][ T8059] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000018
[  877.511667][ T8059] R13: 00007ffcf00aa730 R14: 00000000000d5bd3 R15: 00007ffcf00aa740
[  877.521183][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  877.526987][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  877.532784][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  877.538533][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:52:40 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:40 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

[  877.840989][ T8059] memory: usage 400kB, limit 0kB, failcnt 20
[  877.847073][ T8059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  877.862122][ T8059] Memory cgroup stats for /syz2:
[  877.862324][ T8059] anon 208896
[  877.862324][ T8059] file 0
[  877.862324][ T8059] kernel_stack 36864
[  877.862324][ T8059] slab 311296
[  877.862324][ T8059] sock 0
[  877.862324][ T8059] shmem 69632
[  877.862324][ T8059] file_mapped 0
[  877.862324][ T8059] file_dirty 0
[  877.862324][ T8059] file_writeback 0
[  877.862324][ T8059] anon_thp 0
[  877.862324][ T8059] inactive_anon 0
[  877.862324][ T8059] active_anon 126976
[  877.862324][ T8059] inactive_file 0
[  877.862324][ T8059] active_file 0
[  877.862324][ T8059] unevictable 0
[  877.862324][ T8059] slab_reclaimable 135168
[  877.862324][ T8059] slab_unreclaimable 176128
[  877.862324][ T8059] pgfault 27687
[  877.862324][ T8059] pgmajfault 0
[  877.862324][ T8059] workingset_refault 0
[  877.862324][ T8059] workingset_activate 0
[  877.862324][ T8059] workingset_nodereclaim 0
[  877.862324][ T8059] pgrefill 137
[  877.862324][ T8059] pgscan 138
[  877.862324][ T8059] pgsteal 34
[  877.862324][ T8059] pgactivate 99
[  877.959020][T12063] overlayfs: conflicting lowerdir path
[  877.967548][ T8059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8059,uid=0
[  877.984093][ T8059] Memory cgroup out of memory: Killed process 8059 (syz-executor.2) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0
[  878.006114][ T1062] oom_reaper: reaped process 8059 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
17:52:41 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  878.921537][    T7] device bridge_slave_1 left promiscuous mode
[  878.927762][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.971725][    T7] device bridge_slave_0 left promiscuous mode
[  878.977923][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.431972][    T7] device hsr_slave_0 left promiscuous mode
[  879.491507][    T7] device hsr_slave_1 left promiscuous mode
[  879.548759][    T7] team0 (unregistering): Port device team_slave_1 removed
[  879.565157][    T7] team0 (unregistering): Port device team_slave_0 removed
[  879.580249][    T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  879.635060][    T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  879.712395][    T7] bond0 (unregistering): Released all slaves
[  879.818427][T12073] IPVS: ftp: loaded support on port[0] = 21
[  879.869467][T12073] chnl_net:caif_netlink_parms(): no params data found
[  879.898673][T12073] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.905820][T12073] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.913561][T12073] device bridge_slave_0 entered promiscuous mode
[  879.921068][T12073] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.928233][T12073] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.936023][T12073] device bridge_slave_1 entered promiscuous mode
[  879.954230][T12073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.964782][T12073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.984650][T12073] team0: Port device team_slave_0 added
[  880.045962][T12073] team0: Port device team_slave_1 added
[  880.126990][T12073] device hsr_slave_0 entered promiscuous mode
[  880.191389][T12073] device hsr_slave_1 entered promiscuous mode
[  880.245154][T12073] debugfs: Directory 'hsr0' with parent '/' already present!
[  880.260880][T12073] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.267984][T12073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  880.275264][T12073] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.282314][T12073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.330029][T12073] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.347658][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  880.360079][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.379660][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.397636][T12073] 8021q: adding VLAN 0 to HW filter on device team0
[  880.409702][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  880.422860][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.429892][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.455666][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  880.465793][T11865] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.472921][T11865] bridge0: port 2(bridge_slave_1) entered forwarding state
[  880.497924][T12073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  880.513001][T12073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  880.527068][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  880.536600][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  880.545408][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  880.554592][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  880.563222][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  880.571155][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  880.587255][T12073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.594582][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  880.602549][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  880.765383][T12082] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  880.775917][T12082] CPU: 1 PID: 12082 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0
[  880.783794][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  880.793867][T12082] Call Trace:
[  880.797142][T12082]  dump_stack+0xf5/0x159
[  880.801373][T12082]  dump_header+0xaa/0x449
[  880.805720][T12082]  oom_kill_process.cold+0x10/0x15
[  880.810819][T12082]  out_of_memory+0x231/0xa00
[  880.815426][T12082]  ? preempt_schedule_common+0x37/0x90
[  880.820864][T12082]  ? preempt_schedule+0x30/0x40
[  880.825697][T12082]  ? ___preempt_schedule+0x16/0x20
[  880.830825][T12082]  mem_cgroup_out_of_memory+0x128/0x150
[  880.836356][T12082]  memory_max_write+0x17b/0x250
[  880.841194][T12082]  cgroup_file_write+0x119/0x320
[  880.846126][T12082]  ? high_work_func+0x30/0x30
[  880.850792][T12082]  kernfs_fop_write+0x1f4/0x2e0
[  880.855622][T12082]  ? cgroup_css.part.0+0x90/0x90
[  880.860538][T12082]  __vfs_write+0x67/0xc0
[  880.864762][T12082]  ? kernfs_seq_show+0xe0/0xe0
[  880.869506][T12082]  vfs_write+0x18a/0x390
[  880.873733][T12082]  ksys_write+0xd5/0x1b0
[  880.877957][T12082]  __x64_sys_write+0x4c/0x60
[  880.882529][T12082]  do_syscall_64+0xcc/0x370
[  880.887025][T12082]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  880.892894][T12082] RIP: 0033:0x45a219
[  880.896773][T12082] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  880.916353][T12082] RSP: 002b:00007f5dfb907c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  880.924765][T12082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  880.932803][T12082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  880.940756][T12082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  880.948704][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5dfb9086d4
[  880.956653][T12082] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  880.974176][T12082] memory: usage 2580kB, limit 0kB, failcnt 37
[  880.980390][T12082] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  880.991183][T12082] Memory cgroup stats for /syz1:
[  880.993597][T12082] anon 2232320
[  880.993597][T12082] file 0
[  880.993597][T12082] kernel_stack 36864
[  880.993597][T12082] slab 237568
[  880.993597][T12082] sock 0
[  880.993597][T12082] shmem 0
[  880.993597][T12082] file_mapped 0
[  880.993597][T12082] file_dirty 0
[  880.993597][T12082] file_writeback 0
[  880.993597][T12082] anon_thp 2097152
[  880.993597][T12082] inactive_anon 0
[  880.993597][T12082] active_anon 2232320
[  880.993597][T12082] inactive_file 135168
[  880.993597][T12082] active_file 0
[  880.993597][T12082] unevictable 0
[  880.993597][T12082] slab_reclaimable 0
[  880.993597][T12082] slab_unreclaimable 237568
[  880.993597][T12082] pgfault 14157
[  880.993597][T12082] pgmajfault 0
[  880.993597][T12082] workingset_refault 0
[  880.993597][T12082] workingset_activate 0
[  880.993597][T12082] workingset_nodereclaim 0
[  880.993597][T12082] pgrefill 66
[  880.993597][T12082] pgscan 33
[  880.993597][T12082] pgsteal 0
[  880.993597][T12082] pgactivate 33
[  881.088143][T12082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12081,uid=0
[  881.104313][T12082] Memory cgroup out of memory: Killed process 12081 (syz-executor.1) total-vm:72588kB, anon-rss:2192kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  881.125749][ T1062] oom_reaper: reaped process 12081 (syz-executor.1), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB
[  881.166823][T12073] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  881.177716][T12073] CPU: 1 PID: 12073 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0
[  881.185609][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  881.195646][T12073] Call Trace:
[  881.198924][T12073]  dump_stack+0xf5/0x159
[  881.203196][T12073]  dump_header+0xaa/0x449
[  881.207520][T12073]  oom_kill_process.cold+0x10/0x15
[  881.212702][T12073]  out_of_memory+0x231/0xa00
[  881.217360][T12073]  mem_cgroup_out_of_memory+0x128/0x150
[  881.222907][T12073]  try_charge+0xb3a/0xbc0
[  881.227222][T12073]  ? __rcu_read_unlock+0x50/0x3c0
[  881.232233][T12073]  mem_cgroup_try_charge+0xd2/0x260
[  881.237414][T12073]  mem_cgroup_try_charge_delay+0x3a/0x80
[  881.243102][T12073]  wp_page_copy+0x322/0x1120
[  881.247703][T12073]  ? __read_once_size+0x41/0xe0
[  881.252539][T12073]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  881.258470][T12073]  do_wp_page+0x192/0x11f0
[  881.262870][T12073]  __handle_mm_fault+0x1ab1/0x2c70
[  881.267967][T12073]  handle_mm_fault+0x21b/0x530
[  881.272837][T12073]  __do_page_fault+0x3fb/0x9e0
[  881.277588][T12073]  do_page_fault+0x54/0x233
[  881.282073][T12073]  ? prepare_exit_to_usermode+0x154/0x1a0
[  881.287838][T12073]  page_fault+0x34/0x40
[  881.291972][T12073] RIP: 0033:0x4312f6
[  881.295981][T12073] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 76 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ec 59 64 00 85 c0 0f 84
[  881.315612][T12073] RSP: 002b:00007ffd037a38a0 EFLAGS: 00010206
[  881.321657][T12073] RAX: 0000000000019691 RBX: 0000000000717640 RCX: 0000000000008041
[  881.329621][T12073] RDX: 0000000001d99930 RSI: 0000000001da1970 RDI: 0000000000000003
[  881.337572][T12073] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001d98940
[  881.345568][T12073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000717698
[  881.353533][T12073] R13: 0000000000717698 R14: 0000000000000000 R15: 0000000000002710
[  881.363750][T12073] memory: usage 280kB, limit 0kB, failcnt 45
[  881.369743][T12073] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  881.376705][T12073] Memory cgroup stats for /syz1:
[  881.376897][T12073] anon 94208
[  881.376897][T12073] file 0
[  881.376897][T12073] kernel_stack 36864
[  881.376897][T12073] slab 237568
[  881.376897][T12073] sock 0
[  881.376897][T12073] shmem 0
[  881.376897][T12073] file_mapped 0
[  881.376897][T12073] file_dirty 0
[  881.376897][T12073] file_writeback 0
[  881.376897][T12073] anon_thp 0
[  881.376897][T12073] inactive_anon 0
[  881.376897][T12073] active_anon 94208
[  881.376897][T12073] inactive_file 135168
[  881.376897][T12073] active_file 0
[  881.376897][T12073] unevictable 0
[  881.376897][T12073] slab_reclaimable 0
[  881.376897][T12073] slab_unreclaimable 237568
[  881.376897][T12073] pgfault 14157
[  881.376897][T12073] pgmajfault 0
[  881.376897][T12073] workingset_refault 0
[  881.376897][T12073] workingset_activate 0
[  881.376897][T12073] workingset_nodereclaim 0
[  881.376897][T12073] pgrefill 66
[  881.376897][T12073] pgscan 33
[  881.376897][T12073] pgsteal 0
[  881.376897][T12073] pgactivate 33
[  881.471651][T12073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12073,uid=0
[  881.487274][T12073] Memory cgroup out of memory: Killed process 12073 (syz-executor.1) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0
[  881.505535][ T1062] oom_reaper: reaped process 12073 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
[  882.362112][    T7] device bridge_slave_1 left promiscuous mode
[  882.368297][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.432013][    T7] device bridge_slave_0 left promiscuous mode
[  882.438385][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.141153][    T7] device hsr_slave_0 left promiscuous mode
[  883.181129][    T7] device hsr_slave_1 left promiscuous mode
[  883.226971][    T7] team0 (unregistering): Port device team_slave_1 removed
[  883.237039][    T7] team0 (unregistering): Port device team_slave_0 removed
[  883.250519][    T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  883.325132][    T7] bond0 (unregistering): Released all slaves
17:52:47 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:47 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

17:52:47 executing program 5:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  885.067940][T12085] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  885.098861][T12085] CPU: 1 PID: 12085 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  885.106790][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.116844][T12085] Call Trace:
[  885.120153][T12085]  dump_stack+0xf5/0x159
[  885.124414][T12085]  dump_header+0xaa/0x449
[  885.128763][T12085]  oom_kill_process.cold+0x10/0x15
[  885.133893][T12085]  out_of_memory+0x231/0xa00
[  885.138498][T12085]  ? preempt_schedule_common+0x37/0x90
[  885.144060][T12085]  ? preempt_schedule+0x30/0x40
[  885.148925][T12085]  ? ___preempt_schedule+0x16/0x20
[  885.154053][T12085]  mem_cgroup_out_of_memory+0x128/0x150
[  885.159629][T12085]  memory_max_write+0x17b/0x250
[  885.164497][T12085]  cgroup_file_write+0x119/0x320
[  885.169445][T12085]  ? high_work_func+0x30/0x30
[  885.174131][T12085]  ? kernfs_get_active+0x9b/0xd0
[  885.179085][T12085]  kernfs_fop_write+0x1f4/0x2e0
[  885.183944][T12085]  ? cgroup_css.part.0+0x90/0x90
[  885.188893][T12085]  __vfs_write+0x67/0xc0
[  885.193151][T12085]  ? kernfs_seq_show+0xe0/0xe0
[  885.197927][T12085]  vfs_write+0x18a/0x390
[  885.202202][T12085]  ksys_write+0xd5/0x1b0
[  885.206452][T12085]  __x64_sys_write+0x4c/0x60
[  885.211055][T12085]  do_syscall_64+0xcc/0x370
[  885.215572][T12085]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  885.221465][T12085] RIP: 0033:0x45a219
[  885.225372][T12085] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  885.244979][T12085] RSP: 002b:00007f18b794ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  885.253397][T12085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  885.261371][T12085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  885.269349][T12085] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  885.277329][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18b794f6d4
[  885.285305][T12085] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  885.301668][T12085] memory: usage 28688kB, limit 0kB, failcnt 0
[  885.307837][T12085] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  885.318971][T12085] Memory cgroup stats for /syz5:
[  885.322082][T12085] anon 26722304
[  885.322082][T12085] file 131072
[  885.322082][T12085] kernel_stack 221184
[  885.322082][T12085] slab 753664
[  885.322082][T12085] sock 0
[  885.322082][T12085] shmem 0
[  885.322082][T12085] file_mapped 135168
[  885.322082][T12085] file_dirty 0
[  885.322082][T12085] file_writeback 0
[  885.322082][T12085] anon_thp 25165824
[  885.322082][T12085] inactive_anon 0
[  885.322082][T12085] active_anon 26722304
[  885.322082][T12085] inactive_file 135168
[  885.322082][T12085] active_file 0
[  885.322082][T12085] unevictable 0
[  885.322082][T12085] slab_reclaimable 135168
[  885.322082][T12085] slab_unreclaimable 618496
[  885.322082][T12085] pgfault 14289
[  885.322082][T12085] pgmajfault 0
[  885.322082][T12085] workingset_refault 0
[  885.322082][T12085] workingset_activate 0
[  885.322082][T12085] workingset_nodereclaim 0
[  885.322082][T12085] pgrefill 35
[  885.322082][T12085] pgscan 33
[  885.322082][T12085] pgsteal 0
[  885.322082][T12085] pgactivate 0
[  885.421265][T12085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9472,uid=0
[  885.440751][T12085] Memory cgroup out of memory: Killed process 9472 (syz-executor.5) total-vm:72968kB, anon-rss:2220kB, file-rss:35872kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  885.496586][T12085] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  885.524761][T12085] CPU: 1 PID: 12085 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  885.532690][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.542746][T12085] Call Trace:
[  885.546060][T12085]  dump_stack+0xf5/0x159
[  885.550317][T12085]  dump_header+0xaa/0x449
[  885.554666][T12085]  oom_kill_process.cold+0x10/0x15
[  885.559785][T12085]  out_of_memory+0x231/0xa00
[  885.564402][T12085]  ? preempt_schedule_common+0x37/0x90
[  885.569868][T12085]  ? preempt_schedule+0x30/0x40
[  885.574714][T12085]  ? ___preempt_schedule+0x16/0x20
[  885.579810][T12085]  mem_cgroup_out_of_memory+0x128/0x150
[  885.585343][T12085]  memory_max_write+0x17b/0x250
[  885.590195][T12085]  cgroup_file_write+0x119/0x320
[  885.595127][T12085]  ? high_work_func+0x30/0x30
[  885.599785][T12085]  ? kernfs_get_active+0x9b/0xd0
[  885.604707][T12085]  kernfs_fop_write+0x1f4/0x2e0
[  885.609537][T12085]  ? cgroup_css.part.0+0x90/0x90
[  885.614459][T12085]  __vfs_write+0x67/0xc0
[  885.618685][T12085]  ? kernfs_seq_show+0xe0/0xe0
[  885.623433][T12085]  vfs_write+0x18a/0x390
[  885.627678][T12085]  ksys_write+0xd5/0x1b0
[  885.631907][T12085]  __x64_sys_write+0x4c/0x60
[  885.636508][T12085]  do_syscall_64+0xcc/0x370
[  885.641000][T12085]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  885.646904][T12085] RIP: 0033:0x45a219
[  885.650813][T12085] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  885.670407][T12085] RSP: 002b:00007f18b794ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  885.678826][T12085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  885.686797][T12085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  885.694760][T12085] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  885.702723][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18b794f6d4
[  885.710773][T12085] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  885.721259][T12085] memory: usage 26356kB, limit 0kB, failcnt 0
[  885.727348][T12085] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  885.734654][T12085] Memory cgroup stats for /syz5:
[  885.734912][T12085] anon 24526848
[  885.734912][T12085] file 131072
[  885.734912][T12085] kernel_stack 221184
[  885.734912][T12085] slab 753664
[  885.734912][T12085] sock 0
[  885.734912][T12085] shmem 0
[  885.734912][T12085] file_mapped 135168
[  885.734912][T12085] file_dirty 0
[  885.734912][T12085] file_writeback 0
[  885.734912][T12085] anon_thp 23068672
[  885.734912][T12085] inactive_anon 0
[  885.734912][T12085] active_anon 24526848
[  885.734912][T12085] inactive_file 135168
[  885.734912][T12085] active_file 0
[  885.734912][T12085] unevictable 0
[  885.734912][T12085] slab_reclaimable 135168
[  885.734912][T12085] slab_unreclaimable 618496
[  885.734912][T12085] pgfault 14289
[  885.734912][T12085] pgmajfault 0
[  885.734912][T12085] workingset_refault 0
[  885.734912][T12085] workingset_activate 0
[  885.734912][T12085] workingset_nodereclaim 0
[  885.734912][T12085] pgrefill 35
[  885.734912][T12085] pgscan 33
[  885.734912][T12085] pgsteal 0
[  885.734912][T12085] pgactivate 0
[  885.831141][T12085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8431,uid=0
[  885.846736][T12085] Memory cgroup out of memory: Killed process 8431 (syz-executor.5) total-vm:72584kB, anon-rss:2196kB, file-rss:35848kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  885.865716][ T1062] oom_reaper: reaped process 8431 (syz-executor.5), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB
[  885.939416][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  885.950811][ T8096] CPU: 0 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  885.958696][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.968782][ T8096] Call Trace:
[  885.972161][ T8096]  dump_stack+0xf5/0x159
[  885.976405][ T8096]  dump_header+0xaa/0x449
[  885.980719][ T8096]  oom_kill_process.cold+0x10/0x15
[  885.985870][ T8096]  out_of_memory+0x231/0xa00
[  885.990499][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  885.996031][ T8096]  try_charge+0xb3a/0xbc0
[  886.000356][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  886.005799][ T8096]  cache_grow_begin+0x3ed/0x670
[  886.010783][ T8096]  fallback_alloc+0x161/0x1f0
[  886.015488][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  886.020696][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  886.026279][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  886.031138][ T8096]  sk_prot_alloc+0x5a/0x240
[  886.035628][ T8096]  sk_alloc+0x51/0x540
[  886.039683][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  886.045631][ T8096]  inet_create+0x25c/0x760
[  886.050044][ T8096]  __sock_create+0x241/0x3a0
[  886.054619][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  886.060761][ T8096]  __sys_socket+0x96/0x170
[  886.065163][ T8096]  __x64_sys_socket+0x4c/0x60
[  886.069862][ T8096]  do_syscall_64+0xcc/0x370
[  886.074353][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  886.080226][ T8096] RIP: 0033:0x45cd67
[  886.084112][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  886.103701][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  886.112120][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  886.120069][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  886.128020][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  886.135988][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  886.143966][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  886.153534][ T8096] memory: usage 21720kB, limit 0kB, failcnt 12
[  886.159756][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  886.166734][ T8096] Memory cgroup stats for /syz5:
[  886.167092][ T8096] anon 20197376
[  886.167092][ T8096] file 131072
[  886.167092][ T8096] kernel_stack 184320
[  886.167092][ T8096] slab 753664
[  886.167092][ T8096] sock 0
[  886.167092][ T8096] shmem 0
[  886.167092][ T8096] file_mapped 135168
[  886.167092][ T8096] file_dirty 0
[  886.167092][ T8096] file_writeback 0
[  886.167092][ T8096] anon_thp 18874368
[  886.167092][ T8096] inactive_anon 0
[  886.167092][ T8096] active_anon 20115456
[  886.167092][ T8096] inactive_file 135168
[  886.167092][ T8096] active_file 0
[  886.167092][ T8096] unevictable 0
[  886.167092][ T8096] slab_reclaimable 135168
[  886.167092][ T8096] slab_unreclaimable 618496
[  886.167092][ T8096] pgfault 14322
[  886.167092][ T8096] pgmajfault 0
[  886.167092][ T8096] workingset_refault 0
[  886.167092][ T8096] workingset_activate 0
[  886.167092][ T8096] workingset_nodereclaim 0
[  886.167092][ T8096] pgrefill 35
[  886.167092][ T8096] pgscan 33
[  886.167092][ T8096] pgsteal 0
[  886.167092][ T8096] pgactivate 0
[  886.262682][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8399,uid=0
[  886.278138][ T8096] Memory cgroup out of memory: Killed process 8399 (syz-executor.5) total-vm:72584kB, anon-rss:2196kB, file-rss:35840kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  886.297751][ T1062] oom_reaper: reaped process 8399 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
[  886.300111][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  886.319908][ T8096] CPU: 0 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  886.327712][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  886.337761][ T8096] Call Trace:
[  886.341059][ T8096]  dump_stack+0xf5/0x159
[  886.345353][ T8096]  dump_header+0xaa/0x449
[  886.349695][ T8096]  oom_kill_process.cold+0x10/0x15
[  886.354826][ T8096]  out_of_memory+0x231/0xa00
[  886.359496][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  886.365061][ T8096]  try_charge+0xb3a/0xbc0
[  886.369410][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  886.374909][ T8096]  cache_grow_begin+0x3ed/0x670
[  886.379773][ T8096]  fallback_alloc+0x161/0x1f0
[  886.384622][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  886.389863][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  886.395363][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  886.400250][ T8096]  sk_prot_alloc+0x5a/0x240
[  886.404737][ T8096]  sk_alloc+0x51/0x540
[  886.408804][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  886.414704][ T8096]  inet_create+0x25c/0x760
[  886.419175][ T8096]  __sock_create+0x241/0x3a0
[  886.423749][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  886.429802][ T8096]  __sys_socket+0x96/0x170
[  886.434272][ T8096]  __x64_sys_socket+0x4c/0x60
[  886.438936][ T8096]  do_syscall_64+0xcc/0x370
[  886.443439][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  886.449311][ T8096] RIP: 0033:0x45cd67
[  886.453313][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  886.472918][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  886.481332][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  886.489299][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  886.497251][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  886.505290][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  886.513337][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  886.522402][ T8096] memory: usage 19400kB, limit 0kB, failcnt 18
[  886.528611][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  886.535611][ T8096] Memory cgroup stats for /syz5:
[  886.535802][ T8096] anon 17895424
[  886.535802][ T8096] file 131072
[  886.535802][ T8096] kernel_stack 147456
[  886.535802][ T8096] slab 753664
[  886.535802][ T8096] sock 0
[  886.535802][ T8096] shmem 0
[  886.535802][ T8096] file_mapped 135168
[  886.535802][ T8096] file_dirty 0
[  886.535802][ T8096] file_writeback 0
[  886.535802][ T8096] anon_thp 16777216
[  886.535802][ T8096] inactive_anon 0
[  886.535802][ T8096] active_anon 17895424
[  886.535802][ T8096] inactive_file 135168
[  886.535802][ T8096] active_file 0
[  886.535802][ T8096] unevictable 0
[  886.535802][ T8096] slab_reclaimable 135168
[  886.535802][ T8096] slab_unreclaimable 618496
[  886.535802][ T8096] pgfault 14322
[  886.535802][ T8096] pgmajfault 0
[  886.535802][ T8096] workingset_refault 0
[  886.535802][ T8096] workingset_activate 0
[  886.535802][ T8096] workingset_nodereclaim 0
[  886.535802][ T8096] pgrefill 68
[  886.535802][ T8096] pgscan 68
[  886.535802][ T8096] pgsteal 0
[  886.535802][ T8096] pgactivate 33
[  886.634459][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8443,uid=0
[  886.650515][ T8096] Memory cgroup out of memory: Killed process 8443 (syz-executor.5) total-vm:72584kB, anon-rss:2196kB, file-rss:35836kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  886.698551][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  886.709691][ T8096] CPU: 1 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  886.717481][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  886.727634][ T8096] Call Trace:
[  886.731023][ T8096]  dump_stack+0xf5/0x159
[  886.735289][ T8096]  dump_header+0xaa/0x449
[  886.739641][ T8096]  oom_kill_process.cold+0x10/0x15
[  886.744790][ T8096]  out_of_memory+0x231/0xa00
[  886.749384][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  886.755010][ T8096]  try_charge+0xb3a/0xbc0
[  886.759420][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  886.764877][ T8096]  cache_grow_begin+0x3ed/0x670
[  886.769808][ T8096]  fallback_alloc+0x161/0x1f0
[  886.774549][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  886.779741][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  886.785202][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  886.790089][ T8096]  sk_prot_alloc+0x5a/0x240
[  886.794586][ T8096]  sk_alloc+0x51/0x540
[  886.798777][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  886.804733][ T8096]  inet_create+0x25c/0x760
[  886.809155][ T8096]  __sock_create+0x241/0x3a0
[  886.813743][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  886.819812][ T8096]  __sys_socket+0x96/0x170
[  886.824230][ T8096]  __x64_sys_socket+0x4c/0x60
[  886.828904][ T8096]  do_syscall_64+0xcc/0x370
[  886.833404][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  886.839295][ T8096] RIP: 0033:0x45cd67
[  886.843191][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  886.862786][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  886.871279][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  886.879238][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  886.887197][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  886.895159][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  886.903121][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  886.912888][ T8096] memory: usage 17068kB, limit 0kB, failcnt 25
[  886.919125][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  886.927266][ T8096] Memory cgroup stats for /syz5:
[  886.927441][ T8096] anon 15671296
[  886.927441][ T8096] file 131072
[  886.927441][ T8096] kernel_stack 147456
[  886.927441][ T8096] slab 753664
[  886.927441][ T8096] sock 0
[  886.927441][ T8096] shmem 0
[  886.927441][ T8096] file_mapped 135168
[  886.927441][ T8096] file_dirty 0
[  886.927441][ T8096] file_writeback 0
[  886.927441][ T8096] anon_thp 14680064
[  886.927441][ T8096] inactive_anon 0
[  886.927441][ T8096] active_anon 15671296
[  886.927441][ T8096] inactive_file 135168
[  886.927441][ T8096] active_file 0
[  886.927441][ T8096] unevictable 0
[  886.927441][ T8096] slab_reclaimable 135168
[  886.927441][ T8096] slab_unreclaimable 618496
[  886.927441][ T8096] pgfault 14322
[  886.927441][ T8096] pgmajfault 0
[  886.927441][ T8096] workingset_refault 0
[  886.927441][ T8096] workingset_activate 0
[  886.927441][ T8096] workingset_nodereclaim 0
[  886.927441][ T8096] pgrefill 68
[  886.927441][ T8096] pgscan 68
[  886.927441][ T8096] pgsteal 0
[  886.927441][ T8096] pgactivate 66
[  886.984741][T12090] IPVS: ftp: loaded support on port[0] = 21
[  887.024670][    T7] device bridge_slave_1 left promiscuous mode
[  887.035522][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.042297][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8376,uid=0
[  887.057998][ T8096] Memory cgroup out of memory: Killed process 8376 (syz-executor.5) total-vm:72584kB, anon-rss:2196kB, file-rss:35836kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  887.077252][ T1062] oom_reaper: reaped process 8376 (syz-executor.5), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB
[  887.084403][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  887.102792][    T7] device bridge_slave_0 left promiscuous mode
[  887.109022][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.114017][ T8096] CPU: 1 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  887.123823][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  887.133852][ T8096] Call Trace:
[  887.137157][ T8096]  dump_stack+0xf5/0x159
[  887.141384][ T8096]  dump_header+0xaa/0x449
[  887.145695][ T8096]  oom_kill_process.cold+0x10/0x15
[  887.150802][ T8096]  out_of_memory+0x231/0xa00
[  887.155391][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  887.160936][ T8096]  try_charge+0xb3a/0xbc0
[  887.165325][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  887.170764][ T8096]  cache_grow_begin+0x3ed/0x670
[  887.175671][ T8096]  fallback_alloc+0x161/0x1f0
[  887.180332][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  887.185579][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  887.191102][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  887.195936][ T8096]  sk_prot_alloc+0x5a/0x240
[  887.200479][ T8096]  sk_alloc+0x51/0x540
[  887.204574][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  887.210568][ T8096]  inet_create+0x25c/0x760
[  887.215134][ T8096]  __sock_create+0x241/0x3a0
[  887.219730][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  887.225800][ T8096]  __sys_socket+0x96/0x170
[  887.230199][ T8096]  __x64_sys_socket+0x4c/0x60
[  887.234925][ T8096]  do_syscall_64+0xcc/0x370
[  887.239420][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  887.245357][ T8096] RIP: 0033:0x45cd67
[  887.249240][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  887.268948][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  887.277338][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  887.285290][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  887.293288][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  887.301305][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  887.309340][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  887.317885][ T8096] memory: usage 14748kB, limit 0kB, failcnt 31
[  887.324080][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  887.330964][ T8096] Memory cgroup stats for /syz5:
[  887.331186][ T8096] anon 13447168
[  887.331186][ T8096] file 131072
[  887.331186][ T8096] kernel_stack 110592
[  887.331186][ T8096] slab 753664
[  887.331186][ T8096] sock 0
[  887.331186][ T8096] shmem 0
[  887.331186][ T8096] file_mapped 135168
[  887.331186][ T8096] file_dirty 0
[  887.331186][ T8096] file_writeback 0
[  887.331186][ T8096] anon_thp 12582912
[  887.331186][ T8096] inactive_anon 0
[  887.331186][ T8096] active_anon 13447168
[  887.331186][ T8096] inactive_file 135168
[  887.331186][ T8096] active_file 0
[  887.331186][ T8096] unevictable 0
[  887.331186][ T8096] slab_reclaimable 135168
[  887.331186][ T8096] slab_unreclaimable 618496
[  887.331186][ T8096] pgfault 14322
[  887.331186][ T8096] pgmajfault 0
[  887.331186][ T8096] workingset_refault 0
[  887.331186][ T8096] workingset_activate 0
[  887.331186][ T8096] workingset_nodereclaim 0
[  887.331186][ T8096] pgrefill 68
[  887.331186][ T8096] pgscan 68
[  887.331186][ T8096] pgsteal 0
[  887.331186][ T8096] pgactivate 66
[  887.426811][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11348,uid=0
[  887.442472][ T8096] Memory cgroup out of memory: Killed process 11348 (syz-executor.5) total-vm:72584kB, anon-rss:2204kB, file-rss:35820kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  887.461851][ T1062] oom_reaper: reaped process 11348 (syz-executor.5), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB
[  887.476825][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  887.487991][ T8096] CPU: 1 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  887.495786][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  887.505837][ T8096] Call Trace:
[  887.509195][ T8096]  dump_stack+0xf5/0x159
[  887.513452][ T8096]  dump_header+0xaa/0x449
[  887.517873][ T8096]  oom_kill_process.cold+0x10/0x15
[  887.523067][ T8096]  out_of_memory+0x231/0xa00
[  887.527674][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  887.533923][ T8096]  try_charge+0xb3a/0xbc0
[  887.538358][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  887.543836][ T8096]  cache_grow_begin+0x3ed/0x670
[  887.548704][ T8096]  fallback_alloc+0x161/0x1f0
[  887.553397][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  887.558596][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  887.564066][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  887.568936][ T8096]  sk_prot_alloc+0x5a/0x240
[  887.573450][ T8096]  sk_alloc+0x51/0x540
[  887.577603][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  887.583504][ T8096]  inet_create+0x25c/0x760
[  887.587939][ T8096]  __sock_create+0x241/0x3a0
[  887.592538][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  887.598673][ T8096]  __sys_socket+0x96/0x170
[  887.603154][ T8096]  __x64_sys_socket+0x4c/0x60
[  887.607906][ T8096]  do_syscall_64+0xcc/0x370
[  887.612519][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  887.618457][ T8096] RIP: 0033:0x45cd67
[  887.622497][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  887.642105][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
17:52:50 executing program 0:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080)=0x20000000000084, 0x8)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10)

17:52:50 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:50 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

17:52:50 executing program 5:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  887.650517][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  887.658548][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  887.666519][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  887.674585][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  887.682560][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  887.803169][ T8096] memory: usage 12432kB, limit 0kB, failcnt 37
[  887.821003][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  887.841086][ T8096] Memory cgroup stats for /syz5:
[  887.842107][ T8096] anon 11227136
[  887.842107][ T8096] file 131072
[  887.842107][ T8096] kernel_stack 110592
[  887.842107][ T8096] slab 753664
[  887.842107][ T8096] sock 0
[  887.842107][ T8096] shmem 0
[  887.842107][ T8096] file_mapped 135168
[  887.842107][ T8096] file_dirty 0
[  887.842107][ T8096] file_writeback 0
[  887.842107][ T8096] anon_thp 10485760
[  887.842107][ T8096] inactive_anon 0
[  887.842107][ T8096] active_anon 11227136
[  887.842107][ T8096] inactive_file 135168
[  887.842107][ T8096] active_file 0
[  887.842107][ T8096] unevictable 0
[  887.842107][ T8096] slab_reclaimable 135168
[  887.842107][ T8096] slab_unreclaimable 618496
[  887.842107][ T8096] pgfault 14322
[  887.842107][ T8096] pgmajfault 0
[  887.842107][ T8096] workingset_refault 0
[  887.842107][ T8096] workingset_activate 0
[  887.842107][ T8096] workingset_nodereclaim 0
[  887.842107][ T8096] pgrefill 68
[  887.842107][ T8096] pgscan 68
[  887.842107][ T8096] pgsteal 0
[  887.842107][ T8096] pgactivate 66
[  887.951006][    C1] net_ratelimit: 8 callbacks suppressed
[  887.951016][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  887.953859][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11342,uid=0
[  887.956644][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  887.964581][ T8096] Memory cgroup out of memory: Killed process 11342 (syz-executor.5) total-vm:72584kB, anon-rss:2204kB, file-rss:35820kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  888.030588][T12097] overlayfs: conflicting lowerdir path
[  888.069686][ T1062] oom_reaper: reaped process 11342 (syz-executor.5), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB
[  888.073285][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  888.107448][ T8096] CPU: 0 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  888.115315][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.125383][ T8096] Call Trace:
[  888.128692][ T8096]  dump_stack+0xf5/0x159
[  888.132946][ T8096]  dump_header+0xaa/0x449
[  888.137400][ T8096]  oom_kill_process.cold+0x10/0x15
[  888.142620][ T8096]  out_of_memory+0x231/0xa00
[  888.147230][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  888.152989][ T8096]  try_charge+0xb3a/0xbc0
[  888.157347][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  888.162848][ T8096]  cache_grow_begin+0x3ed/0x670
[  888.167719][ T8096]  fallback_alloc+0x161/0x1f0
[  888.172454][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  888.177662][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  888.183129][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  888.187992][ T8096]  sk_prot_alloc+0x5a/0x240
[  888.192533][ T8096]  sk_alloc+0x51/0x540
[  888.196671][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  888.202571][ T8096]  inet_create+0x25c/0x760
[  888.207086][ T8096]  __sock_create+0x241/0x3a0
[  888.211725][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  888.217979][ T8096]  __sys_socket+0x96/0x170
[  888.222510][ T8096]  __x64_sys_socket+0x4c/0x60
[  888.227206][ T8096]  do_syscall_64+0xcc/0x370
[  888.231742][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  888.237645][ T8096] RIP: 0033:0x45cd67
[  888.241632][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  888.261239][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  888.269657][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  888.277650][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  888.285661][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  888.293636][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  888.301693][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  888.316097][ T8096] memory: usage 10272kB, limit 0kB, failcnt 43
[  888.341803][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  888.351030][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  888.356783][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  888.370485][ T8096] Memory cgroup stats for /syz5:
[  888.370918][ T8096] anon 9019392
[  888.370918][ T8096] file 131072
[  888.370918][ T8096] kernel_stack 73728
[  888.370918][ T8096] slab 753664
[  888.370918][ T8096] sock 0
[  888.370918][ T8096] shmem 0
[  888.370918][ T8096] file_mapped 135168
[  888.370918][ T8096] file_dirty 0
[  888.370918][ T8096] file_writeback 0
[  888.370918][ T8096] anon_thp 8388608
[  888.370918][ T8096] inactive_anon 0
[  888.370918][ T8096] active_anon 9019392
[  888.370918][ T8096] inactive_file 135168
[  888.370918][ T8096] active_file 0
[  888.370918][ T8096] unevictable 0
[  888.370918][ T8096] slab_reclaimable 135168
[  888.370918][ T8096] slab_unreclaimable 618496
[  888.370918][ T8096] pgfault 14322
[  888.370918][ T8096] pgmajfault 0
[  888.370918][ T8096] workingset_refault 0
[  888.370918][ T8096] workingset_activate 0
[  888.370918][ T8096] workingset_nodereclaim 0
[  888.370918][ T8096] pgrefill 68
[  888.370918][ T8096] pgscan 68
[  888.370918][ T8096] pgsteal 0
[  888.370918][ T8096] pgactivate 66
[  888.572915][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11325,uid=0
17:52:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000001c0))
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(r3, 0x1263, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r6)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)
flock(r5, 0x4)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000340), 0x41395527)

[  888.624339][ T8096] Memory cgroup out of memory: Killed process 11325 (syz-executor.5) total-vm:72584kB, anon-rss:2204kB, file-rss:35816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  888.692133][ T1062] oom_reaper: reaped process 11325 (syz-executor.5), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB
[  888.722069][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  888.770947][ T8096] CPU: 0 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  888.778778][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.788828][ T8096] Call Trace:
[  888.792132][ T8096]  dump_stack+0xf5/0x159
[  888.796434][ T8096]  dump_header+0xaa/0x449
[  888.800780][ T8096]  oom_kill_process.cold+0x10/0x15
[  888.805915][ T8096]  out_of_memory+0x231/0xa00
[  888.810531][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  888.816096][ T8096]  try_charge+0xb3a/0xbc0
[  888.820453][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  888.825960][ T8096]  cache_grow_begin+0x3ed/0x670
[  888.830818][ T8096]  fallback_alloc+0x161/0x1f0
[  888.835531][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  888.840733][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  888.846206][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  888.851108][ T8096]  sk_prot_alloc+0x5a/0x240
[  888.855632][ T8096]  sk_alloc+0x51/0x540
[  888.859713][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  888.865717][ T8096]  inet_create+0x25c/0x760
[  888.870157][ T8096]  __sock_create+0x241/0x3a0
[  888.874759][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  888.880839][ T8096]  __sys_socket+0x96/0x170
[  888.885257][ T8096]  __x64_sys_socket+0x4c/0x60
[  888.890015][ T8096]  do_syscall_64+0xcc/0x370
[  888.894574][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  888.900457][ T8096] RIP: 0033:0x45cd67
[  888.904441][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  888.924353][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  888.932760][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  888.940723][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  888.948688][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  888.956652][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  888.964615][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  888.974920][ T8096] memory: usage 7768kB, limit 0kB, failcnt 50
[  888.981202][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  888.988429][ T8096] Memory cgroup stats for /syz5:
[  888.988758][ T8096] anon 6811648
[  888.988758][ T8096] file 131072
[  888.988758][ T8096] kernel_stack 73728
[  888.988758][ T8096] slab 753664
[  888.988758][ T8096] sock 0
[  888.988758][ T8096] shmem 0
[  888.988758][ T8096] file_mapped 135168
[  888.988758][ T8096] file_dirty 0
[  888.988758][ T8096] file_writeback 0
[  888.988758][ T8096] anon_thp 6291456
[  888.988758][ T8096] inactive_anon 0
[  888.988758][ T8096] active_anon 6811648
[  888.988758][ T8096] inactive_file 135168
[  888.988758][ T8096] active_file 0
[  888.988758][ T8096] unevictable 0
[  888.988758][ T8096] slab_reclaimable 135168
[  888.988758][ T8096] slab_unreclaimable 618496
[  888.988758][ T8096] pgfault 14322
[  888.988758][ T8096] pgmajfault 0
[  888.988758][ T8096] workingset_refault 0
[  888.988758][ T8096] workingset_activate 0
[  888.988758][ T8096] workingset_nodereclaim 0
[  888.988758][ T8096] pgrefill 68
[  888.988758][ T8096] pgscan 68
[  888.988758][ T8096] pgsteal 0
[  888.988758][ T8096] pgactivate 66
[  889.085161][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11317,uid=0
[  889.100714][ T8096] Memory cgroup out of memory: Killed process 11317 (syz-executor.5) total-vm:72848kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  889.151943][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  889.163142][ T8096] CPU: 1 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  889.170947][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  889.182136][ T8096] Call Trace:
[  889.185439][ T8096]  dump_stack+0xf5/0x159
[  889.189705][ T8096]  dump_header+0xaa/0x449
[  889.194047][ T8096]  oom_kill_process.cold+0x10/0x15
[  889.199189][ T8096]  out_of_memory+0x231/0xa00
[  889.203813][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  889.209456][ T8096]  try_charge+0xb3a/0xbc0
[  889.213923][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  889.219396][ T8096]  cache_grow_begin+0x3ed/0x670
[  889.224254][ T8096]  fallback_alloc+0x161/0x1f0
[  889.229098][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  889.234302][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  889.239772][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  889.244644][ T8096]  sk_prot_alloc+0x5a/0x240
[  889.249328][ T8096]  sk_alloc+0x51/0x540
[  889.253403][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  889.259384][ T8096]  inet_create+0x25c/0x760
[  889.263845][ T8096]  __sock_create+0x241/0x3a0
[  889.268518][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  889.274648][ T8096]  __sys_socket+0x96/0x170
[  889.279133][ T8096]  __x64_sys_socket+0x4c/0x60
[  889.283850][ T8096]  do_syscall_64+0xcc/0x370
[  889.288361][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  889.294328][ T8096] RIP: 0033:0x45cd67
[  889.298236][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  889.317843][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  889.326456][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  889.334615][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  889.342595][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  889.350569][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  889.358541][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  889.369935][ T8096] memory: usage 5400kB, limit 0kB, failcnt 57
[  889.379873][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  889.386857][ T8096] Memory cgroup stats for /syz5:
[  889.387057][ T8096] anon 4579328
[  889.387057][ T8096] file 131072
[  889.387057][ T8096] kernel_stack 73728
[  889.387057][ T8096] slab 753664
[  889.387057][ T8096] sock 0
[  889.387057][ T8096] shmem 0
[  889.387057][ T8096] file_mapped 135168
[  889.387057][ T8096] file_dirty 0
[  889.387057][ T8096] file_writeback 0
[  889.387057][ T8096] anon_thp 4194304
[  889.387057][ T8096] inactive_anon 0
[  889.387057][ T8096] active_anon 4579328
[  889.387057][ T8096] inactive_file 135168
[  889.387057][ T8096] active_file 0
[  889.387057][ T8096] unevictable 0
[  889.387057][ T8096] slab_reclaimable 135168
[  889.387057][ T8096] slab_unreclaimable 618496
[  889.387057][ T8096] pgfault 14322
[  889.387057][ T8096] pgmajfault 0
[  889.387057][ T8096] workingset_refault 0
[  889.387057][ T8096] workingset_activate 0
[  889.387057][ T8096] workingset_nodereclaim 0
[  889.387057][ T8096] pgrefill 68
[  889.387057][ T8096] pgscan 101
[  889.387057][ T8096] pgsteal 0
[  889.387057][ T8096] pgactivate 66
[  889.482683][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8416,uid=0
[  889.498234][ T8096] Memory cgroup out of memory: Killed process 8416 (syz-executor.5) total-vm:72584kB, anon-rss:2196kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  889.517109][ T1062] oom_reaper: reaped process 8416 (syz-executor.5), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB
[  889.531342][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  889.542503][ T8096] CPU: 1 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  889.550408][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  889.560457][ T8096] Call Trace:
[  889.563775][ T8096]  dump_stack+0xf5/0x159
[  889.568005][ T8096]  dump_header+0xaa/0x449
[  889.572386][ T8096]  oom_kill_process.cold+0x10/0x15
[  889.577480][ T8096]  out_of_memory+0x231/0xa00
[  889.582072][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  889.587609][ T8096]  try_charge+0xb3a/0xbc0
[  889.591969][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  889.597451][ T8096]  cache_grow_begin+0x3ed/0x670
[  889.602290][ T8096]  fallback_alloc+0x161/0x1f0
[  889.606974][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  889.612153][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  889.617646][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  889.622490][ T8096]  sk_prot_alloc+0x5a/0x240
[  889.626984][ T8096]  sk_alloc+0x51/0x540
[  889.631043][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  889.636937][ T8096]  inet_create+0x25c/0x760
[  889.641406][ T8096]  __sock_create+0x241/0x3a0
[  889.646034][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  889.652131][ T8096]  __sys_socket+0x96/0x170
[  889.657848][ T8096]  __x64_sys_socket+0x4c/0x60
[  889.662565][ T8096]  do_syscall_64+0xcc/0x370
[  889.667137][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  889.673074][ T8096] RIP: 0033:0x45cd67
[  889.677007][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  889.696602][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  889.704996][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  889.712951][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  889.720912][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  889.728870][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  889.736850][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  889.745475][ T8096] memory: usage 3080kB, limit 0kB, failcnt 63
[  889.745980][    T7] device hsr_slave_0 left promiscuous mode
[  889.751591][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  889.751596][ T8096] Memory cgroup stats for /syz5:
[  889.751811][ T8096] anon 2433024
[  889.751811][ T8096] file 131072
[  889.751811][ T8096] kernel_stack 36864
[  889.751811][ T8096] slab 753664
[  889.751811][ T8096] sock 0
[  889.751811][ T8096] shmem 0
[  889.751811][ T8096] file_mapped 135168
[  889.751811][ T8096] file_dirty 0
[  889.751811][ T8096] file_writeback 0
[  889.751811][ T8096] anon_thp 2097152
[  889.751811][ T8096] inactive_anon 0
[  889.751811][ T8096] active_anon 2433024
[  889.751811][ T8096] inactive_file 135168
[  889.751811][ T8096] active_file 0
[  889.751811][ T8096] unevictable 0
[  889.751811][ T8096] slab_reclaimable 135168
[  889.751811][ T8096] slab_unreclaimable 618496
[  889.751811][ T8096] pgfault 14322
[  889.751811][ T8096] pgmajfault 0
[  889.751811][ T8096] workingset_refault 0
[  889.751811][ T8096] workingset_activate 0
[  889.751811][ T8096] workingset_nodereclaim 0
[  889.751811][ T8096] pgrefill 68
[  889.751811][ T8096] pgscan 101
[  889.751811][ T8096] pgsteal 0
[  889.751811][ T8096] pgactivate 66
[  889.859676][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8333,uid=0
[  889.875091][ T8096] Memory cgroup out of memory: Killed process 8333 (syz-executor.5) total-vm:72852kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
17:52:52 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x2}}, {{&(0x7f0000000080)=@hci, 0x279, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x2}}], 0x400000000000348, 0x0)

[  889.914500][    T7] device hsr_slave_1 left promiscuous mode
[  889.924550][ T8096] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[  889.935708][ T8096] CPU: 1 PID: 8096 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  889.943607][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  889.953695][ T8096] Call Trace:
[  889.956999][ T8096]  dump_stack+0xf5/0x159
17:52:53 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
sendmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="78bb22a18f76"}, 0x80, 0x0}}, {{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'team_slave_1\x00'}}, 0x80, 0x0}}], 0x2, 0x0)

[  889.961392][ T8096]  dump_header+0xaa/0x449
[  889.965729][ T8096]  oom_kill_process.cold+0x10/0x15
[  889.970853][ T8096]  out_of_memory+0x231/0xa00
[  889.975488][ T8096]  mem_cgroup_out_of_memory+0x128/0x150
[  889.981056][ T8096]  try_charge+0xb3a/0xbc0
[  889.985404][ T8096]  __memcg_kmem_charge_memcg+0x4a/0xe0
[  889.990931][ T8096]  cache_grow_begin+0x3ed/0x670
[  889.995788][ T8096]  fallback_alloc+0x161/0x1f0
[  890.000476][ T8096]  ____cache_alloc_node+0x1b1/0x1c0
[  890.005677][ T8096]  ? debug_smp_processor_id+0x4c/0x172
[  890.011183][ T8096]  kmem_cache_alloc+0x179/0x5d0
[  890.016050][ T8096]  sk_prot_alloc+0x5a/0x240
[  890.020644][ T8096]  sk_alloc+0x51/0x540
[  890.024718][ T8096]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  890.030624][ T8096]  inet_create+0x25c/0x760
[  890.035081][ T8096]  __sock_create+0x241/0x3a0
[  890.039715][ T8096]  ? blkcg_maybe_throttle_current+0x472/0x610
[  890.045829][ T8096]  __sys_socket+0x96/0x170
[  890.050253][ T8096]  __x64_sys_socket+0x4c/0x60
[  890.054928][ T8096]  do_syscall_64+0xcc/0x370
[  890.059417][ T8096]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  890.065375][ T8096] RIP: 0033:0x45cd67
[  890.069360][ T8096] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  890.089049][ T8096] RSP: 002b:00007ffe0399de08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  890.097454][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045cd67
[  890.105407][ T8096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  890.113362][ T8096] RBP: 0000000000000213 R08: 0000000000000000 R09: 000000000000000a
[  890.121312][ T8096] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  890.129264][ T8096] R13: 00007ffe0399e520 R14: 00000000000d8066 R15: 00007ffe0399e530
[  890.137703][ T8096] memory: usage 756kB, limit 0kB, failcnt 69
[  890.143745][ T8096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  890.150720][ T8096] Memory cgroup stats for /syz5:
[  890.151065][ T8096] anon 114688
[  890.151065][ T8096] file 131072
[  890.151065][ T8096] kernel_stack 36864
[  890.151065][ T8096] slab 753664
[  890.151065][ T8096] sock 0
[  890.151065][ T8096] shmem 0
[  890.151065][ T8096] file_mapped 135168
[  890.151065][ T8096] file_dirty 0
[  890.151065][ T8096] file_writeback 0
[  890.151065][ T8096] anon_thp 0
[  890.151065][ T8096] inactive_anon 0
[  890.151065][ T8096] active_anon 114688
[  890.151065][ T8096] inactive_file 135168
[  890.151065][ T8096] active_file 0
[  890.151065][ T8096] unevictable 0
[  890.151065][ T8096] slab_reclaimable 135168
[  890.151065][ T8096] slab_unreclaimable 618496
[  890.151065][ T8096] pgfault 14322
[  890.151065][ T8096] pgmajfault 0
[  890.151065][ T8096] workingset_refault 0
[  890.151065][ T8096] workingset_activate 0
[  890.151065][ T8096] workingset_nodereclaim 0
[  890.151065][ T8096] pgrefill 68
[  890.151065][ T8096] pgscan 101
[  890.151065][ T8096] pgsteal 0
[  890.151065][ T8096] pgactivate 66
[  890.245769][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8096,uid=0
17:52:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

[  890.247088][    T7] team0 (unregistering): Port device team_slave_1 removed
[  890.261285][ T8096] Memory cgroup out of memory: Killed process 8096 (syz-executor.5) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0
[  890.290669][    T7] team0 (unregistering): Port device team_slave_0 removed
[  890.301483][    T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.345648][    T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.437489][    T7] bond0 (unregistering): Released all slaves
17:52:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

[  890.490731][   T26] audit: type=1800 audit(1572889973.475:102): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16593 res=0
[  890.707997][T12105] IPVS: ftp: loaded support on port[0] = 21
[  890.817229][T12090] chnl_net:caif_netlink_parms(): no params data found
[  890.890467][T12090] bridge0: port 1(bridge_slave_0) entered blocking state
[  890.901419][T12090] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.909164][T12090] device bridge_slave_0 entered promiscuous mode
[  890.939759][T12090] bridge0: port 2(bridge_slave_1) entered blocking state
[  890.948965][T12090] bridge0: port 2(bridge_slave_1) entered disabled state
[  890.959040][T12090] device bridge_slave_1 entered promiscuous mode
[  890.992238][T12105] chnl_net:caif_netlink_parms(): no params data found
[  891.007411][T12090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  891.035914][T12090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  891.050328][T12105] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.057903][T12105] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.066133][T12105] device bridge_slave_0 entered promiscuous mode
[  891.088539][T12090] team0: Port device team_slave_0 added
[  891.097506][T12105] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.105127][T12105] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.113107][T12105] device bridge_slave_1 entered promiscuous mode
[  891.121027][T12090] team0: Port device team_slave_1 added
[  891.186735][T12090] device hsr_slave_0 entered promiscuous mode
[  891.245195][T12090] device hsr_slave_1 entered promiscuous mode
[  891.320997][T12090] debugfs: Directory 'hsr0' with parent '/' already present!
[  891.333018][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  891.344969][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  891.365993][T12090] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.373055][T12090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  891.380369][T12090] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.387423][T12090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.401388][T12105] team0: Port device team_slave_0 added
[  891.408618][T12105] team0: Port device team_slave_1 added
[  891.463590][T12105] device hsr_slave_0 entered promiscuous mode
[  891.511303][T12105] device hsr_slave_1 entered promiscuous mode
[  891.551117][T12105] debugfs: Directory 'hsr0' with parent '/' already present!
[  891.572896][T12105] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.579944][T12105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  891.587213][T12105] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.594373][T12105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.635956][T12125] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.644391][T12125] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.657756][T12125] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.665432][T12125] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.683723][T12090] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.701761][T12090] 8021q: adding VLAN 0 to HW filter on device team0
[  891.708997][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  891.716981][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  891.729144][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  891.737897][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  891.746383][T12125] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.753444][T12125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.771800][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  891.780508][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  891.789172][T12091] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.796241][T12091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  891.805172][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  891.814335][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  891.823274][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  891.832066][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  891.840879][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  891.907572][T12105] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.915319][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  891.924081][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  891.933051][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  891.941696][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  891.981093][T12090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  891.992118][T12090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  892.000444][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  892.009149][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  892.021659][T12105] 8021q: adding VLAN 0 to HW filter on device team0
[  892.029883][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  892.038159][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  892.076813][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  892.085782][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  892.094299][T11865] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.101343][T11865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.116206][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.159456][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  892.168863][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  892.183770][T11626] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.190800][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.199165][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  892.206556][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  892.255142][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  892.264095][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  892.273331][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  892.282653][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  892.291417][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  892.299880][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  892.308931][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  892.349632][T12105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  892.360840][T12105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  892.372309][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  892.381183][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  892.389670][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  892.398990][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  892.407658][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  892.466282][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  892.474128][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  892.490579][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.556951][T12132] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  892.567520][T12132] CPU: 1 PID: 12132 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  892.575408][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  892.585444][T12132] Call Trace:
[  892.588851][T12132]  dump_stack+0xf5/0x159
[  892.593082][T12132]  dump_header+0xaa/0x449
[  892.597397][T12132]  oom_kill_process.cold+0x10/0x15
[  892.602509][T12132]  out_of_memory+0x231/0xa00
[  892.607092][T12132]  ? preempt_schedule_common+0x37/0x90
[  892.612578][T12132]  ? preempt_schedule+0x30/0x40
[  892.617415][T12132]  ? ___preempt_schedule+0x16/0x20
[  892.622529][T12132]  mem_cgroup_out_of_memory+0x128/0x150
[  892.628076][T12132]  memory_max_write+0x17b/0x250
[  892.632915][T12132]  cgroup_file_write+0x119/0x320
[  892.637896][T12132]  ? high_work_func+0x30/0x30
[  892.642579][T12132]  ? kernfs_get_active+0x9b/0xd0
[  892.647512][T12132]  kernfs_fop_write+0x1f4/0x2e0
[  892.652347][T12132]  ? cgroup_css.part.0+0x90/0x90
[  892.657269][T12132]  __vfs_write+0x67/0xc0
[  892.661513][T12132]  ? kernfs_seq_show+0xe0/0xe0
[  892.666272][T12132]  vfs_write+0x18a/0x390
[  892.670501][T12132]  ksys_write+0xd5/0x1b0
[  892.674732][T12132]  __x64_sys_write+0x4c/0x60
[  892.679307][T12132]  do_syscall_64+0xcc/0x370
[  892.683823][T12132]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  892.689706][T12132] RIP: 0033:0x45a219
[  892.693602][T12132] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  892.713194][T12132] RSP: 002b:00007f241affdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  892.721603][T12132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  892.729570][T12132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  892.737575][T12132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  892.745538][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f241affe6d4
[  892.755238][T12132] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  892.769112][T12132] memory: usage 2588kB, limit 0kB, failcnt 21
[  892.778777][T12132] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  892.785936][T12132] Memory cgroup stats for /syz2:
[  892.787968][T12132] anon 2191360
[  892.787968][T12132] file 0
[  892.787968][T12132] kernel_stack 36864
[  892.787968][T12132] slab 176128
[  892.787968][T12132] sock 0
[  892.787968][T12132] shmem 69632
[  892.787968][T12132] file_mapped 0
[  892.787968][T12132] file_dirty 0
[  892.787968][T12132] file_writeback 0
[  892.787968][T12132] anon_thp 2097152
[  892.787968][T12132] inactive_anon 0
[  892.787968][T12132] active_anon 2260992
[  892.787968][T12132] inactive_file 0
[  892.787968][T12132] active_file 0
[  892.787968][T12132] unevictable 0
[  892.787968][T12132] slab_reclaimable 135168
[  892.787968][T12132] slab_unreclaimable 40960
[  892.787968][T12132] pgfault 27786
[  892.787968][T12132] pgmajfault 0
[  892.787968][T12132] workingset_refault 0
[  892.787968][T12132] workingset_activate 0
[  892.787968][T12132] workingset_nodereclaim 0
[  892.787968][T12132] pgrefill 137
[  892.787968][T12132] pgscan 138
[  892.787968][T12132] pgsteal 34
[  892.787968][T12132] pgactivate 99
[  892.885602][T12132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12131,uid=0
[  892.901516][T12132] Memory cgroup out of memory: Killed process 12131 (syz-executor.2) total-vm:72588kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[  892.924606][ T1062] oom_reaper: reaped process 12131 (syz-executor.2), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB
[  892.971393][T12090] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  892.981584][T12090] CPU: 0 PID: 12090 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  892.989459][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  892.999593][T12090] Call Trace:
[  893.002968][T12090]  dump_stack+0xf5/0x159
[  893.007324][T12090]  dump_header+0xaa/0x449
[  893.011651][T12090]  oom_kill_process.cold+0x10/0x15
[  893.016800][T12090]  out_of_memory+0x231/0xa00
[  893.021579][T12090]  mem_cgroup_out_of_memory+0x128/0x150
[  893.027111][T12090]  try_charge+0xb3a/0xbc0
[  893.031427][T12090]  ? __rcu_read_unlock+0x50/0x3c0
[  893.036440][T12090]  mem_cgroup_try_charge+0xd2/0x260
[  893.041643][T12090]  mem_cgroup_try_charge_delay+0x3a/0x80
[  893.047348][T12090]  wp_page_copy+0x322/0x1120
[  893.051967][T12090]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  893.058198][T12090]  ? __read_once_size+0x41/0xe0
[  893.063037][T12090]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  893.068941][T12090]  do_wp_page+0x192/0x11f0
[  893.073383][T12090]  __handle_mm_fault+0x1ab1/0x2c70
[  893.078522][T12090]  handle_mm_fault+0x21b/0x530
[  893.083349][T12090]  __do_page_fault+0x3fb/0x9e0
[  893.088201][T12090]  do_page_fault+0x54/0x233
[  893.092727][T12090]  ? do_syscall_64+0x270/0x370
[  893.097552][T12090]  page_fault+0x34/0x40
[  893.101688][T12090] RIP: 0033:0x403a62
[  893.105570][T12090] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 <e8> d9 91 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 46 05 00 48
[  893.125209][T12090] RSP: 002b:00007ffc3074ad40 EFLAGS: 00010246
[  893.131256][T12090] RAX: 0000000000000000 RBX: 00000000000d9e39 RCX: 0000000000413cd0
[  893.139208][T12090] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc3074be70
[  893.147235][T12090] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000020f3940
[  893.155187][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3074be70
[  893.163154][T12090] R13: 00007ffc3074be60 R14: 0000000000000000 R15: 00007ffc3074be70
[  893.173338][T12090] memory: usage 292kB, limit 0kB, failcnt 29
[  893.179373][T12090] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  893.189513][    T7] device bridge_slave_1 left promiscuous mode
[  893.195675][T12090] Memory cgroup stats for /syz2:
[  893.195867][T12090] anon 20480
[  893.195867][T12090] file 0
[  893.195867][T12090] kernel_stack 36864
[  893.195867][T12090] slab 176128
[  893.195867][T12090] sock 0
[  893.195867][T12090] shmem 69632
[  893.195867][T12090] file_mapped 0
[  893.195867][T12090] file_dirty 0
[  893.195867][T12090] file_writeback 0
[  893.195867][T12090] anon_thp 0
[  893.195867][T12090] inactive_anon 0
[  893.195867][T12090] active_anon 90112
[  893.195867][T12090] inactive_file 0
[  893.195867][T12090] active_file 0
[  893.195867][T12090] unevictable 0
[  893.195867][T12090] slab_reclaimable 135168
[  893.195867][T12090] slab_unreclaimable 40960
[  893.195867][T12090] pgfault 27786
[  893.195867][T12090] pgmajfault 0
[  893.195867][T12090] workingset_refault 0
[  893.195867][T12090] workingset_activate 0
[  893.195867][T12090] workingset_nodereclaim 0
[  893.195867][T12090] pgrefill 137
[  893.195867][T12090] pgscan 171
[  893.195867][T12090] pgsteal 34
[  893.195867][T12090] pgactivate 99
[  893.251943][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.302124][T12090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12090,uid=0
[  893.322253][T12090] Memory cgroup out of memory: Killed process 12090 (syz-executor.2) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0
[  893.344460][    T7] device bridge_slave_0 left promiscuous mode
[  893.350748][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.360362][ T1062] oom_reaper: reaped process 12090 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB
17:52:57 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="a6b8773e0de2d92ed2f6c61eb35419dca18fc496f0f462549fbb", 0x1a, 0x9}, {&(0x7f0000000440)="25d292ada344030b64b34be6e8890d823abc964ba9d60dbe924ed33616a828bf7f5a7c7faeee0ba96675b0a086651a91821a", 0x32, 0x1}], 0x11080, &(0x7f0000000800)={[{@barrier='barrier'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x2e}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'proceth1.}#vmnet1}wlan1cgroup\\^$%\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '-'}}, {@obj_type={'obj_type', 0x3d, 'ppp1'}}, {@pcr={'pcr', 0x3d, 0x25}}]})
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x800)
write$tun(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='proceth1.}#vmnet1}wlan1cgroup\\^$%\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x400c0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d78af7725d2a0e849063d3078303030303010303055e60000303039362c666f776e65723de481c8bf7c58e95ee53e", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,context=staff_u,func=FILE_MMAP,\x00'])
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=0x0, @ANYBLOB="0801005a", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

17:52:57 executing program 5:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

17:52:57 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

[  894.121188][    T7] device hsr_slave_0 left promiscuous mode
[  894.161007][    T7] device hsr_slave_1 left promiscuous mode
[  894.210002][    T7] team0 (unregistering): Port device team_slave_1 removed
[  894.225457][    T7] team0 (unregistering): Port device team_slave_0 removed
[  894.241280][    T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  894.299593][    T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  894.387965][    T7] bond0 (unregistering): Released all slaves
[  895.816442][T12145] IPVS: ftp: loaded support on port[0] = 21
[  895.868078][T12145] chnl_net:caif_netlink_parms(): no params data found
[  895.919952][T12145] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.927198][T12145] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.935362][T12145] device bridge_slave_0 entered promiscuous mode
[  895.943021][T12145] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.950226][T12145] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.959223][T12145] device bridge_slave_1 entered promiscuous mode
[  896.001667][T12145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.012486][T12145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.030098][T12145] team0: Port device team_slave_0 added
[  896.036910][T12145] team0: Port device team_slave_1 added
[  896.123580][T12145] device hsr_slave_0 entered promiscuous mode
[  896.171414][T12145] device hsr_slave_1 entered promiscuous mode
[  896.210988][T12145] debugfs: Directory 'hsr0' with parent '/' already present!
[  896.250390][T12145] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.257651][T12145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  896.265020][T12145] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.272073][T12145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  896.305704][T12145] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.341348][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  896.366397][T11888] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.374488][T11888] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.383577][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  896.420783][T12145] 8021q: adding VLAN 0 to HW filter on device team0
[  896.431676][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  896.440139][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.447359][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  896.457826][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  896.467215][T12125] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.474331][T12125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  896.519960][T12145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  896.530613][T12145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  896.544566][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  896.553878][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  896.562543][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  896.571294][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  896.579715][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  896.587563][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  896.626196][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  896.633975][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  896.644521][T12145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  896.671676][    T7] device bridge_slave_1 left promiscuous mode
[  896.678092][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.721811][    T7] device bridge_slave_0 left promiscuous mode
[  896.727992][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.441232][    T7] device hsr_slave_0 left promiscuous mode
[  897.491051][    T7] device hsr_slave_1 left promiscuous mode
[  897.537190][    T7] team0 (unregistering): Port device team_slave_1 removed
[  897.547765][    T7] team0 (unregistering): Port device team_slave_0 removed
[  897.557645][    T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  897.625137][    T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  897.691505][    T7] bond0 (unregistering): Released all slaves
[  897.927154][T12154] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  897.937591][T12154] CPU: 1 PID: 12154 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  897.945519][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  897.955611][T12154] Call Trace:
[  897.958894][T12154]  dump_stack+0xf5/0x159
[  897.963141][T12154]  dump_header+0xaa/0x449
[  897.967474][T12154]  oom_kill_process.cold+0x10/0x15
[  897.972631][T12154]  out_of_memory+0x231/0xa00
[  897.977222][T12154]  ? preempt_schedule_common+0x37/0x90
[  897.982691][T12154]  ? preempt_schedule+0x30/0x40
[  897.987537][T12154]  ? ___preempt_schedule+0x16/0x20
[  897.992643][T12154]  mem_cgroup_out_of_memory+0x128/0x150
[  897.998185][T12154]  memory_max_write+0x17b/0x250
[  898.003052][T12154]  cgroup_file_write+0x119/0x320
[  898.007985][T12154]  ? high_work_func+0x30/0x30
[  898.012643][T12154]  ? kernfs_get_active+0x9b/0xd0
[  898.017574][T12154]  kernfs_fop_write+0x1f4/0x2e0
[  898.022416][T12154]  ? cgroup_css.part.0+0x90/0x90
[  898.027347][T12154]  __vfs_write+0x67/0xc0
[  898.031586][T12154]  ? kernfs_seq_show+0xe0/0xe0
[  898.036483][T12154]  vfs_write+0x18a/0x390
[  898.040736][T12154]  ksys_write+0xd5/0x1b0
[  898.044975][T12154]  __x64_sys_write+0x4c/0x60
[  898.050158][T12154]  do_syscall_64+0xcc/0x370
[  898.054650][T12154]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  898.060535][T12154] RIP: 0033:0x45a219
[  898.064423][T12154] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  898.084019][T12154] RSP: 002b:00007f9b89eb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  898.092444][T12154] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  898.100423][T12154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  898.108387][T12154] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  898.116860][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b89eb96d4
[  898.124816][T12154] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  898.133264][T12154] memory: usage 2780kB, limit 0kB, failcnt 70
[  898.139482][T12154] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  898.146527][T12154] Memory cgroup stats for /syz5:
[  898.147535][T12154] anon 2306048
[  898.147535][T12154] file 131072
[  898.147535][T12154] kernel_stack 36864
[  898.147535][T12154] slab 618496
[  898.147535][T12154] sock 0
[  898.147535][T12154] shmem 0
[  898.147535][T12154] file_mapped 135168
[  898.147535][T12154] file_dirty 0
[  898.147535][T12154] file_writeback 0
[  898.147535][T12154] anon_thp 2097152
[  898.147535][T12154] inactive_anon 0
[  898.147535][T12154] active_anon 2306048
[  898.147535][T12154] inactive_file 135168
[  898.147535][T12154] active_file 0
[  898.147535][T12154] unevictable 0
[  898.147535][T12154] slab_reclaimable 135168
[  898.147535][T12154] slab_unreclaimable 483328
[  898.147535][T12154] pgfault 14388
[  898.147535][T12154] pgmajfault 0
[  898.147535][T12154] workingset_refault 0
[  898.147535][T12154] workingset_activate 0
[  898.147535][T12154] workingset_nodereclaim 0
[  898.147535][T12154] pgrefill 68
[  898.147535][T12154] pgscan 101
[  898.147535][T12154] pgsteal 0
[  898.147535][T12154] pgactivate 66
[  898.245596][T12154] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12152,uid=0
17:53:01 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300))
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000280), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000)
write$cgroup_int(r6, 0x0, 0x0)

17:53:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:01 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

17:53:01 executing program 0:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

[  898.261686][T12154] Memory cgroup out of memory: Killed process 12152 (syz-executor.5) total-vm:72588kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000
[  898.283643][ T1062] oom_reaper: reaped process 12152 (syz-executor.5), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB
17:53:01 executing program 5:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

[  898.763499][T12145] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  898.820983][T12145] CPU: 1 PID: 12145 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0
[  898.828998][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  898.839058][T12145] Call Trace:
[  898.842361][T12145]  dump_stack+0xf5/0x159
[  898.846622][T12145]  dump_header+0xaa/0x449
[  898.850986][T12145]  oom_kill_process.cold+0x10/0x15
[  898.856108][T12145]  out_of_memory+0x231/0xa00
[  898.860776][T12145]  mem_cgroup_out_of_memory+0x128/0x150
[  898.866425][T12145]  try_charge+0xb3a/0xbc0
[  898.870770][T12145]  ? __rcu_read_unlock+0x50/0x3c0
[  898.875895][T12145]  mem_cgroup_try_charge+0xd2/0x260
[  898.881120][T12145]  mem_cgroup_try_charge_delay+0x3a/0x80
[  898.886825][T12145]  wp_page_copy+0x322/0x1120
[  898.891443][T12145]  ? __read_once_size+0x41/0xe0
[  898.896335][T12145]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  898.902325][T12145]  do_wp_page+0x192/0x11f0
[  898.906755][T12145]  __handle_mm_fault+0x1ab1/0x2c70
[  898.911974][T12145]  handle_mm_fault+0x21b/0x530
[  898.916752][T12145]  __do_page_fault+0x3fb/0x9e0
[  898.921540][T12145]  do_page_fault+0x54/0x233
[  898.926052][T12145]  ? prepare_exit_to_usermode+0x154/0x1a0
[  898.931772][T12145]  page_fault+0x34/0x40
[  898.935976][T12145] RIP: 0033:0x4312f6
[  898.939884][T12145] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 76 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ec 59 64 00 85 c0 0f 84
[  898.959536][T12145] RSP: 002b:00007ffdd5fbb8e0 EFLAGS: 00010206
[  898.965606][T12145] RAX: 0000000000019691 RBX: 0000000000717640 RCX: 0000000000008041
[  898.973583][T12145] RDX: 0000000001cbc930 RSI: 0000000001cc4970 RDI: 0000000000000003
[  898.981563][T12145] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001cbb940
[  898.989537][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000717698
[  898.997515][T12145] R13: 0000000000717698 R14: 0000000000000000 R15: 0000000000002710
[  899.113049][T12145] memory: usage 452kB, limit 0kB, failcnt 78
[  899.122411][T12145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  899.146514][T12145] Memory cgroup stats for /syz5:
[  899.146783][T12145] anon 139264
[  899.146783][T12145] file 131072
[  899.146783][T12145] kernel_stack 0
[  899.146783][T12145] slab 618496
[  899.146783][T12145] sock 0
[  899.146783][T12145] shmem 0
[  899.146783][T12145] file_mapped 135168
[  899.146783][T12145] file_dirty 0
[  899.146783][T12145] file_writeback 0
[  899.146783][T12145] anon_thp 0
[  899.146783][T12145] inactive_anon 0
[  899.146783][T12145] active_anon 139264
[  899.146783][T12145] inactive_file 135168
[  899.146783][T12145] active_file 0
[  899.146783][T12145] unevictable 0
[  899.146783][T12145] slab_reclaimable 135168
[  899.146783][T12145] slab_unreclaimable 483328
[  899.146783][T12145] pgfault 14388
17:53:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

[  899.146783][T12145] pgmajfault 0
[  899.146783][T12145] workingset_refault 0
[  899.146783][T12145] workingset_activate 0
[  899.146783][T12145] workingset_nodereclaim 0
[  899.146783][T12145] pgrefill 68
[  899.146783][T12145] pgscan 101
[  899.146783][T12145] pgsteal 0
[  899.146783][T12145] pgactivate 66
17:53:02 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

[  899.487089][T12145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12145,uid=0
[  899.533223][T12145] Memory cgroup out of memory: Killed process 12145 (syz-executor.5) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0
[  899.582451][ T1062] oom_reaper: reaped process 12145 (syz-executor.5), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB
17:53:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:02 executing program 5:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

[  900.839682][T12181] IPVS: ftp: loaded support on port[0] = 21
[  900.918406][T12181] chnl_net:caif_netlink_parms(): no params data found
[  900.944756][T12181] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.951888][T12181] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.959470][T12181] device bridge_slave_0 entered promiscuous mode
[  900.967107][T12181] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.974418][T12181] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.982300][T12181] device bridge_slave_1 entered promiscuous mode
[  901.022573][T12181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.033442][T12181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.051061][T12181] team0: Port device team_slave_0 added
[  901.057430][T12181] team0: Port device team_slave_1 added
[  901.142928][T12181] device hsr_slave_0 entered promiscuous mode
[  901.191311][T12181] device hsr_slave_1 entered promiscuous mode
[  901.281051][T12181] debugfs: Directory 'hsr0' with parent '/' already present!
[  901.318008][T12181] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.325139][T12181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.332570][T12181] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.339593][T12181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.369593][T12181] 8021q: adding VLAN 0 to HW filter on device bond0
[  901.405733][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  901.414010][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.422257][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.431487][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  901.442722][T12181] 8021q: adding VLAN 0 to HW filter on device team0
[  901.449928][T12134] device bridge_slave_1 left promiscuous mode
[  901.456294][T12134] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.491672][T12134] device bridge_slave_0 left promiscuous mode
[  901.498069][T12134] bridge0: port 1(bridge_slave_0) entered disabled state
[  902.231120][T12134] device hsr_slave_0 left promiscuous mode
[  902.284014][T12134] device hsr_slave_1 left promiscuous mode
[  902.328517][T12134] team0 (unregistering): Port device team_slave_1 removed
[  902.339106][T12134] team0 (unregistering): Port device team_slave_0 removed
[  902.350385][T12134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  902.385304][T12134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  902.463445][T12134] bond0 (unregistering): Released all slaves
[  902.588791][T12181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  902.599668][T12181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  902.611341][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  902.619881][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  902.628348][T12091] bridge0: port 1(bridge_slave_0) entered blocking state
[  902.635393][T12091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  902.643705][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  902.652282][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  902.660662][T12091] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.667712][T12091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  902.675427][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  902.684462][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  902.693606][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  902.702433][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  902.711105][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  902.719804][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  902.728457][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  902.736725][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  902.745311][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  902.753730][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  902.762571][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  902.770803][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  902.785891][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  902.793785][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  902.804717][T12181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  903.051794][T12188] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  903.062561][T12188] CPU: 1 PID: 12188 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  903.070454][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  903.080513][T12188] Call Trace:
[  903.083821][T12188]  dump_stack+0xf5/0x159
[  903.088080][T12188]  dump_header+0xaa/0x449
[  903.092426][T12188]  oom_kill_process.cold+0x10/0x15
[  903.097556][T12188]  out_of_memory+0x231/0xa00
[  903.102157][T12188]  ? preempt_schedule_common+0x37/0x90
[  903.107623][T12188]  ? preempt_schedule+0x30/0x40
[  903.112492][T12188]  ? ___preempt_schedule+0x16/0x20
[  903.117623][T12188]  mem_cgroup_out_of_memory+0x128/0x150
[  903.123192][T12188]  memory_max_write+0x17b/0x250
[  903.128067][T12188]  cgroup_file_write+0x119/0x320
[  903.133011][T12188]  ? high_work_func+0x30/0x30
[  903.137907][T12188]  ? kernfs_get_active+0x9b/0xd0
[  903.142879][T12188]  kernfs_fop_write+0x1f4/0x2e0
[  903.147751][T12188]  ? cgroup_css.part.0+0x90/0x90
[  903.152711][T12188]  __vfs_write+0x67/0xc0
[  903.157029][T12188]  ? kernfs_seq_show+0xe0/0xe0
[  903.161808][T12188]  vfs_write+0x18a/0x390
[  903.166063][T12188]  ksys_write+0xd5/0x1b0
[  903.170315][T12188]  __x64_sys_write+0x4c/0x60
[  903.174924][T12188]  do_syscall_64+0xcc/0x370
[  903.179443][T12188]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  903.185330][T12188] RIP: 0033:0x45a219
[  903.189242][T12188] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  903.208857][T12188] RSP: 002b:00007f93a6730c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  903.217283][T12188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  903.225277][T12188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  903.233260][T12188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  903.241276][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f93a67316d4
[  903.249338][T12188] R13: 00000000004cab68 R14: 00000000004e3020 R15: 00000000ffffffff
[  903.261619][T12188] memory: usage 2548kB, limit 0kB, failcnt 30
[  903.267979][T12188] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  903.275330][T12188] Memory cgroup stats for /syz2:
[  903.277601][T12188] anon 2265088
[  903.277601][T12188] file 0
[  903.277601][T12188] kernel_stack 36864
[  903.277601][T12188] slab 176128
[  903.277601][T12188] sock 0
[  903.277601][T12188] shmem 69632
[  903.277601][T12188] file_mapped 0
[  903.277601][T12188] file_dirty 0
[  903.277601][T12188] file_writeback 0
[  903.277601][T12188] anon_thp 2097152
[  903.277601][T12188] inactive_anon 0
[  903.277601][T12188] active_anon 2265088
[  903.277601][T12188] inactive_file 0
[  903.277601][T12188] active_file 0
[  903.277601][T12188] unevictable 0
[  903.277601][T12188] slab_reclaimable 135168
[  903.277601][T12188] slab_unreclaimable 40960
[  903.277601][T12188] pgfault 27852
[  903.277601][T12188] pgmajfault 0
[  903.277601][T12188] workingset_refault 0
[  903.277601][T12188] workingset_activate 0
[  903.277601][T12188] workingset_nodereclaim 0
[  903.277601][T12188] pgrefill 137
[  903.277601][T12188] pgscan 171
[  903.277601][T12188] pgsteal 34
[  903.277601][T12188] pgactivate 99
[  903.374018][T12188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12187,uid=0
[  903.390353][T12188] Memory cgroup out of memory: Killed process 12187 (syz-executor.2) total-vm:72588kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000
[  903.416209][ T1062] oom_reaper: reaped process 12187 (syz-executor.2), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB
[  903.568721][T12181] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  903.582164][T12181] CPU: 0 PID: 12181 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
[  903.590165][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  903.600222][T12181] Call Trace:
[  903.603511][T12181]  dump_stack+0xf5/0x159
[  903.607944][T12181]  dump_header+0xaa/0x449
[  903.612269][T12181]  oom_kill_process.cold+0x10/0x15
[  903.617372][T12181]  out_of_memory+0x231/0xa00
[  903.621962][T12181]  mem_cgroup_out_of_memory+0x128/0x150
[  903.627662][T12181]  try_charge+0xb3a/0xbc0
[  903.632014][T12181]  ? __rcu_read_unlock+0x50/0x3c0
[  903.637164][T12181]  mem_cgroup_try_charge+0xd2/0x260
[  903.642478][T12181]  mem_cgroup_try_charge_delay+0x3a/0x80
[  903.648105][T12181]  wp_page_copy+0x322/0x1120
[  903.652785][T12181]  ? cgroup_rstat_updated+0xbe/0x1e0
[  903.658088][T12181]  ? __read_once_size+0x41/0xe0
[  903.662942][T12181]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  903.668837][T12181]  do_wp_page+0x192/0x11f0
[  903.673248][T12181]  __handle_mm_fault+0x1ab1/0x2c70
[  903.678556][T12181]  ? __schedule+0x319/0x640
[  903.683086][T12181]  handle_mm_fault+0x21b/0x530
[  903.687880][T12181]  __do_page_fault+0x3fb/0x9e0
[  903.692643][T12181]  do_page_fault+0x54/0x233
[  903.697137][T12181]  ? do_syscall_64+0x270/0x370
[  903.701893][T12181]  page_fault+0x34/0x40
[  903.706102][T12181] RIP: 0033:0x403a62
[  903.710070][T12181] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 <e8> d9 91 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 46 05 00 48
[  903.729675][T12181] RSP: 002b:00007ffe8c7c2d30 EFLAGS: 00010246
[  903.735754][T12181] RAX: 0000000000000000 RBX: 00000000000dc736 RCX: 0000000000413cd0
[  903.743715][T12181] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe8c7c3e60
[  903.751686][T12181] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000292e940
[  903.759679][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8c7c3e60
[  903.767639][T12181] R13: 00007ffe8c7c3e50 R14: 0000000000000000 R15: 00007ffe8c7c3e60
[  903.780432][T12181] memory: usage 256kB, limit 0kB, failcnt 38
[  903.786624][T12181] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  903.793866][T12181] Memory cgroup stats for /syz2:
[  903.794144][T12181] anon 45056
[  903.794144][T12181] file 0
[  903.794144][T12181] kernel_stack 36864
[  903.794144][T12181] slab 176128
[  903.794144][T12181] sock 0
[  903.794144][T12181] shmem 69632
[  903.794144][T12181] file_mapped 0
[  903.794144][T12181] file_dirty 0
[  903.794144][T12181] file_writeback 0
[  903.794144][T12181] anon_thp 0
[  903.794144][T12181] inactive_anon 0
[  903.794144][T12181] active_anon 45056
[  903.794144][T12181] inactive_file 0
[  903.794144][T12181] active_file 0
[  903.794144][T12181] unevictable 0
[  903.794144][T12181] slab_reclaimable 135168
[  903.794144][T12181] slab_unreclaimable 40960
[  903.794144][T12181] pgfault 27852
[  903.794144][T12181] pgmajfault 0
[  903.794144][T12181] workingset_refault 0
[  903.794144][T12181] workingset_activate 0
[  903.794144][T12181] workingset_nodereclaim 0
[  903.794144][T12181] pgrefill 170
[  903.794144][T12181] pgscan 171
[  903.794144][T12181] pgsteal 34
[  903.794144][T12181] pgactivate 99
[  903.888007][T12181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12181,uid=0
[  903.903832][T12181] Memory cgroup out of memory: Killed process 12181 (syz-executor.2) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0
[  903.922439][ T1062] oom_reaper: reaped process 12181 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB
[  905.021838][T12134] device bridge_slave_1 left promiscuous mode
[  905.028266][T12134] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.092147][T12134] device bridge_slave_0 left promiscuous mode
[  905.098534][T12134] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.861323][T12134] device hsr_slave_0 left promiscuous mode
[  905.941114][T12134] device hsr_slave_1 left promiscuous mode
[  905.988544][T12134] team0 (unregistering): Port device team_slave_1 removed
[  905.998843][T12134] team0 (unregistering): Port device team_slave_0 removed
[  906.010054][T12134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.065430][T12134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  906.142458][T12134] bond0 (unregistering): Released all slaves
17:53:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:10 executing program 5:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

17:53:10 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

17:53:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:10 executing program 0:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

17:53:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:11 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x8000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a40000000000", 0x1d}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

17:53:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote})

[  909.834361][T12226] IPVS: ftp: loaded support on port[0] = 21
[  909.892844][T12226] chnl_net:caif_netlink_parms(): no params data found
[  909.920736][T12226] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.928286][T12226] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.936108][T12226] device bridge_slave_0 entered promiscuous mode
[  909.943822][T12226] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.950893][T12226] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.958734][T12226] device bridge_slave_1 entered promiscuous mode
[  909.982091][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.994977][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.112891][T12226] team0: Port device team_slave_0 added
[  910.119595][T12226] team0: Port device team_slave_1 added
[  910.175153][T12226] device hsr_slave_0 entered promiscuous mode
[  910.231385][T12226] device hsr_slave_1 entered promiscuous mode
[  910.271048][T12226] debugfs: Directory 'hsr0' with parent '/' already present!
[  910.323484][T12226] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.330618][T12226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.337921][T12226] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.345052][T12226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.386424][T12226] 8021q: adding VLAN 0 to HW filter on device bond0
[  910.398684][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  910.404894][T12231] IPVS: ftp: loaded support on port[0] = 21
[  910.415533][T12125] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.423714][T12125] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.435432][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  910.453897][T12226] 8021q: adding VLAN 0 to HW filter on device team0
[  910.478481][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  910.487183][T11888] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.494246][T11888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.508050][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  910.516603][T12125] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.523755][T12125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.546212][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  910.555480][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  910.564638][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  910.578275][T12226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  910.589106][T12226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  910.602646][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  910.611397][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  910.619939][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  910.634638][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  910.642561][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  910.662073][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  910.699187][T12231] chnl_net:caif_netlink_parms(): no params data found
[  910.730772][T12231] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.737918][T12231] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.746026][T12231] device bridge_slave_0 entered promiscuous mode
[  910.753771][T12231] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.760830][T12231] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.769200][T12231] device bridge_slave_1 entered promiscuous mode
[  910.817659][T12231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  910.838910][T12231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.860201][T12231] team0: Port device team_slave_0 added
[  910.867216][T12231] team0: Port device team_slave_1 added
[  910.923928][T12231] device hsr_slave_0 entered promiscuous mode
[  910.961971][T12231] device hsr_slave_1 entered promiscuous mode
[  911.001095][T12231] debugfs: Directory 'hsr0' with parent '/' already present!
[  911.047579][T12231] 8021q: adding VLAN 0 to HW filter on device bond0
[  911.070016][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  911.078196][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  911.087992][T12231] 8021q: adding VLAN 0 to HW filter on device team0
[  911.102395][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  911.111721][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  911.120223][T12125] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.127297][T12125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  911.136026][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  911.151122][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  911.159773][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  911.168624][T12125] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.175688][T12125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  911.184189][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  911.193320][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  911.203159][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  911.212130][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  911.221686][T12125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  911.231872][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  911.240424][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  911.254526][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  911.263118][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  911.274140][T12231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  911.285448][T12231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  911.293633][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  911.302301][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  911.317622][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  911.325104][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  911.335315][T12231] 8021q: adding VLAN 0 to HW filter on device batadv0
17:53:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote})

17:53:26 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @pix_mp})

17:53:26 executing program 3:
syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0)

17:53:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:26 executing program 0:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c594512634c060cfb6b72c3c922835d2b5fe1600c22b487813885"], 0x35)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r2)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
getpgid(r4)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000380))
r6 = getpid()
r7 = syz_open_procfs(r6, 0x0)
sendfile(r3, r7, 0x0, 0x0)
finit_module(r7, &(0x7f0000000000)='security/(\x00', 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

17:53:26 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@remote, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(aegis128-aesni)\x00'}}}]}, 0x184}}, 0x0)

17:53:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000300}]}]}, 0x24}}, 0x0)

[  923.651920][T12271] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
17:53:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000300}]}]}, 0x24}}, 0x0)

17:53:26 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@remote, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(aegis128-aesni)\x00'}}}]}, 0x184}}, 0x0)

17:53:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:26 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@remote, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(aegis128-aesni)\x00'}}}]}, 0x184}}, 0x0)

[  923.836920][T12278] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
17:53:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x110001)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
socket$inet6(0xa, 0x0, 0x35)

17:53:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000300}]}]}, 0x24}}, 0x0)

17:53:39 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@remote, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(aegis128-aesni)\x00'}}}]}, 0x184}}, 0x0)

17:53:39 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x9, 0xfffffffc}]}}}]}, 0x3c}, 0x1, 0x500000000000000}, 0x0)

17:53:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote})

17:53:39 executing program 0:
getpid()
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$P9_RXATTRWALK(r3, 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x3)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000a80), &(0x7f0000000b80)=0x6)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000500)={{0x1, 0x5, 0x4, 0xffff, 'syz1\x00', 0x7f}, 0x0, [0x8, 0x6, 0x4, 0x0, 0x5, 0x3f, 0x80000001, 0x0, 0x7fffffff, 0x6d48, 0x6, 0x0, 0x0, 0x6, 0x2000000000006, 0x5, 0x3, 0xb1, 0x8a, 0x4, 0x3, 0xffff, 0x5, 0x0, 0x9, 0x2, 0x7, 0xd7, 0xffffffffffff6474, 0x40000000000000, 0x7, 0xffffffffffff5c2a, 0x2400000000000000, 0x6, 0xffffffffffffffe0, 0x80000001, 0x81, 0x6424, 0x7, 0x4, 0x100, 0x5, 0x4, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x5, 0x8001, 0x7, 0x4, 0x9, 0x977, 0x31dc, 0xfffffffffffff001, 0x0, 0x9, 0x9, 0xfffffffffffffffa, 0x3, 0x0, 0x3, 0x6, 0x1, 0x6, 0x0, 0x8, 0x400, 0xbf, 0x2, 0x800, 0x6, 0x0, 0x5, 0x9f05, 0x8, 0x8, 0x4, 0x4, 0x7, 0x4, 0x1000000005, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8, 0xeb, 0x8, 0x7, 0x27a0, 0xffffffffffff85d9, 0x1, 0x0, 0x7, 0x4a99, 0xfffffffffffffffa, 0x0, 0x40, 0x7ff, 0x8, 0x0, 0x0, 0x10000, 0xdb16, 0x1, 0x128f, 0x2, 0x4, 0x4, 0x55, 0x854, 0x1, 0x1, 0x6, 0x400, 0x9, 0x9, 0x8000, 0x7, 0x2, 0x5ef7, 0x98e9, 0x100, 0x3, 0xfffffffffffff800, 0x6]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
userfaultfd(0x80000)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

17:53:39 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000)

[  936.857429][T12291] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
17:53:39 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000040), 0x4)

[  936.912540][T12297] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
17:53:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000300}]}]}, 0x24}}, 0x0)

17:53:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x9, 0xfffffffc}]}}}]}, 0x3c}, 0x1, 0x500000000000000}, 0x0)

17:53:40 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000040), 0x4)

17:53:40 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000040), 0x4)

[  937.279961][T12313] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
[  937.338551][T12316] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
17:53:49 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000000380)=@hci, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb5, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000003f00be33f525814000167c4cef00", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2018f59e6fc82dd8"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000005a40), 0xf3, 0x60000023, 0x0)

17:53:49 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000040), 0x4)

17:53:49 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x9, 0xfffffffc}]}}}]}, 0x3c}, 0x1, 0x500000000000000}, 0x0)

17:53:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote})

17:53:49 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'security\x00'}, &(0x7f0000000380)=0x54)

[  946.130467][T12320] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
17:53:49 executing program 0:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002)

17:53:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:49 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000000380)=@hci, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb5, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000003f00be33f525814000167c4cef00", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2018f59e6fc82dd8"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000005a40), 0xf3, 0x60000023, 0x0)

17:53:49 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x9, 0xfffffffc}]}}}]}, 0x3c}, 0x1, 0x500000000000000}, 0x0)

17:53:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:49 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000000380)=@hci, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb5, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000003f00be33f525814000167c4cef00", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2018f59e6fc82dd8"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000005a40), 0xf3, 0x60000023, 0x0)

[  946.545447][T12338] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
17:53:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:49 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000000380)=@hci, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb5, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000003f00be33f525814000167c4cef00", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2018f59e6fc82dd8"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000005a40), 0xf3, 0x60000023, 0x0)

17:53:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

[  950.200620][T12360] IPVS: ftp: loaded support on port[0] = 21
17:53:56 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x22})
ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000080))

17:53:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1)
readv(r0, &(0x7f0000000580), 0x3c1)

17:53:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:59 executing program 1:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x314}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0)

17:53:59 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff07f4f9002304000a04f5110800010003010002080003", 0x1f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

17:53:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:53:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28)

17:54:00 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff07f4f9002304000a04f5110800010003010002080003", 0x1f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

17:54:00 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:00 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)

17:54:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e00"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x8, 0x800000000000004, 0x4, 0x8008, 0x0, 0x1, 0x0, [], 0x0, r3, 0x1, 0x2}, 0x3c)

[  957.322474][   T26] audit: type=1800 audit(1572890040.315:103): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16635 res=0
17:54:05 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:11 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

17:54:11 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff07f4f9002304000a04f5110800010003010002080003", 0x1f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

17:54:11 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:11 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)

17:54:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:11 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

17:54:11 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)

17:54:11 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff07f4f9002304000a04f5110800010003010002080003", 0x1f)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

17:54:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:11 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

17:54:11 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:19 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:19 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:19 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

17:54:19 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)

17:54:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:19 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  977.047080][T12453] overlayfs: workdir and upperdir must reside under the same mount
17:54:20 executing program 2:
r0 = socket$inet(0x2, 0x200000000000003, 0x9)
setsockopt(r0, 0xff, 0x1, 0x0, 0x0)

17:54:20 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000012efc8)={0x0, 0x0, &(0x7f000008eff0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8}]}, 0x1c}}, 0x0)

[  977.252722][   T26] audit: type=1800 audit(1572890060.245:104): pid=12460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16660 res=0
[  977.308309][   T26] audit: type=1804 audit(1572890060.245:105): pid=12460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/16/file0" dev="sda1" ino=16660 res=1
17:54:20 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

[  977.343369][   T26] audit: type=1804 audit(1572890060.295:106): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/16/file0" dev="sda1" ino=16660 res=1
17:54:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000012efc8)={0x0, 0x0, &(0x7f000008eff0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8}]}, 0x1c}}, 0x0)

[  977.470982][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  977.476820][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  977.482610][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  977.488349][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:54:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000012efc8)={0x0, 0x0, &(0x7f000008eff0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8}]}, 0x1c}}, 0x0)

17:54:20 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="740000002c00010700"/20, @ANYRES32, @ANYBLOB="0000000000000000010000000c0001007463696e646578004400010000ffffffffffffff6b00000000eac19e61fe6c7a000c36c5ee00000000000000000000000000000000ff7500"/91], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[  977.667187][T12452] overlayfs: workdir and upperdir must reside under the same mount
[  978.045578][   T26] audit: type=1804 audit(1572890061.035:107): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/16/file0" dev="sda1" ino=16660 res=1
[  978.070830][   T26] audit: type=1804 audit(1572890061.035:108): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/16/file0" dev="sda1" ino=16660 res=1
[  978.095856][   T26] audit: type=1804 audit(1572890061.035:109): pid=12463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/16/file0" dev="sda1" ino=16660 res=1
17:54:29 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket(0x18, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000880)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
socket(0x18, 0x0, 0x0)
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r1, r2, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$KDSETLED(r5, 0x4b32, 0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

17:54:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000012efc8)={0x0, 0x0, &(0x7f000008eff0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8}]}, 0x1c}}, 0x0)

17:54:29 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:29 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000a0149020105000000005d8e9078ac141400ac1414bb01890b017f000001e00000014404009300004e2204f1907804faf6ad0040ac8b3ca94559b2581eed3d2a5ebf5ef31e52e1db11604e2b49e0b787582e7466f04f38d8c4ead6483b937e78189ed652d24dfa8abeffff281ab1e190155d2db43ff0d725aebe1107be1b5472bd7e20b5a5683179b002151c0cf8a819d6caf83802ff75523bf47a12392d7f06f5ae231b0cc6c4a3e0e3bfe2283b683c63d26ee76f8c926af1aa8de97491a975b77723bb1db260844c0565908c96f97eeec5fb5fd2e3b18a9911c2f7aa703fd5b62be1ed338fb019cc134c050cde1d33bbfc02bab1cdfb7469de8f7adf3c0d38a2fb96422e92081e88e3006471ac60389a659486a604c4b96a4db8a92d1b832b57dec0c50897a510b47e2ac5f4bc02097b4b0841094c060589007856b05283371f3f31c422803fe7236206a9a9ed54ada5ed19767df4af7885914b2a0f1197828d22abe8704072913868066136208c22afe0261c421f10d6b359a685b8005e41822eb3592e325f68"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:29 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:29 executing program 4:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

[  986.060840][   T26] audit: type=1800 audit(1572890069.045:110): pid=12488 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16669 res=0
17:54:29 executing program 2:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

[  986.099150][   T26] audit: type=1804 audit(1572890069.085:111): pid=12488 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/17/file0" dev="sda1" ino=16669 res=1
[  986.165378][   T26] audit: type=1804 audit(1572890069.155:112): pid=12493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/17/file0" dev="sda1" ino=16669 res=1
[  986.316693][T12500] overlayfs: conflicting lowerdir path
[  986.316722][T12499] overlayfs: conflicting lowerdir path
[  986.431272][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  986.437309][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  986.444780][   T26] audit: type=1800 audit(1572890069.435:113): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16674 res=0
[  986.466340][   T26] audit: type=1804 audit(1572890069.445:114): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir354329806/syzkaller.6U5rXt/20/file0" dev="sda1" ino=16674 res=1
[  986.534819][   T26] audit: type=1804 audit(1572890069.515:115): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir354329806/syzkaller.6U5rXt/20/file0" dev="sda1" ino=16674 res=1
[  986.591024][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  986.596857][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:54:29 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:29 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:29 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  986.953033][T12488] syz-executor.1 (12488) used greatest stack depth: 9888 bytes left
[  987.029652][   T26] audit: type=1800 audit(1572890070.015:116): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16670 res=0
[  987.098302][   T26] audit: type=1804 audit(1572890070.065:117): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/18/file0" dev="sda1" ino=16670 res=1
[  987.144565][   T26] audit: type=1804 audit(1572890070.135:118): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/18/file0" dev="sda1" ino=16670 res=1
[  987.341859][T12520] overlayfs: conflicting lowerdir path
[  987.356196][T12521] overlayfs: conflicting lowerdir path
17:54:30 executing program 2:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

[  987.585903][   T26] audit: type=1800 audit(1572890070.575:119): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16674 res=0
17:54:30 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

[  987.870971][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  987.876862][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  987.882655][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  987.888432][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:54:40 executing program 4:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:40 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:40 executing program 2:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:40 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:40 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:40 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  997.429239][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  997.429258][   T26] audit: type=1800 audit(1572890080.415:125): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16563 res=0
[  997.460357][   T26] audit: type=1800 audit(1572890080.425:126): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16595 res=0
[  997.482035][   T26] audit: type=1804 audit(1572890080.445:127): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir354329806/syzkaller.6U5rXt/22/file0" dev="sda1" ino=16595 res=1
[  997.509376][   T26] audit: type=1804 audit(1572890080.445:128): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/20/file0" dev="sda1" ino=16563 res=1
[  997.640125][T12546] overlayfs: conflicting lowerdir path
[  997.722667][   T26] audit: type=1804 audit(1572890080.705:129): pid=12549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/20/file0" dev="sda1" ino=16563 res=1
[  997.764301][   T26] audit: type=1804 audit(1572890080.745:130): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir354329806/syzkaller.6U5rXt/22/file0" dev="sda1" ino=16595 res=1
[  997.833603][T12545] overlayfs: workdir and upperdir must reside under the same mount
17:54:41 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:41 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:41 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000a0149020105000000005d8e9078ac141400ac1414bb01890b017f000001e00000014404009300004e2204f1907804faf6ad0040ac8b3ca94559b2581eed3d2a5ebf5ef31e52e1db11604e2b49e0b787582e7466f04f38d8c4ead6483b937e78189ed652d24dfa8abeffff281ab1e190155d2db43ff0d725aebe1107be1b5472bd7e20b5a5683179b002151c0cf8a819d6caf83802ff75523bf47a12392d7f06f5ae231b0cc6c4a3e0e3bfe2283b683c63d26ee76f8c926af1aa8de97491a975b77723bb1db260844c0565908c96f97eeec5fb5fd2e3b18a9911c2f7aa703fd5b62be1ed338fb019cc134c050cde1d33bbfc02bab1cdfb7469de8f7adf3c0d38a2fb96422e92081e88e3006471ac60389a659486a604c4b96a4db8a92d1b832b57dec0c50897a510b47e2ac5f4bc02097b4b0841094c060589007856b05283371f3f31c422803fe7236206a9a9ed54ada5ed19767df4af7885914b2a0f1197828d22abe8704072913868066136208c22afe0261c421f10d6b359a685b8005e41822eb3592e325f68"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_XMIT_HASH_POLICY={0x8}]}}}]}, 0x3c}}, 0x0)

[  998.438097][   T26] audit: type=1800 audit(1572890081.425:131): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16530 res=0
[  998.486015][   T26] audit: type=1804 audit(1572890081.465:132): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/21/file0" dev="sda1" ino=16530 res=1
[  998.505526][T12560] netlink: 'syz-executor.5': attribute type 14 has an invalid length.
[  998.542103][T12563] netlink: 'syz-executor.5': attribute type 14 has an invalid length.
17:54:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

[  998.572309][   T26] audit: type=1804 audit(1572890081.565:133): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/21/file0" dev="sda1" ino=16530 res=1
[  998.737704][T12573] overlayfs: conflicting lowerdir path
[  998.737712][T12572] overlayfs: conflicting lowerdir path
[  998.911293][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  998.917466][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  999.074629][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  999.084809][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:54:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

17:54:49 executing program 4:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:49 executing program 1:
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$binfmt_misc(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x80, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="080adcdd6aac0ef2fdbc50d725804c37b661afcac023ff78c79890b659", 0x1d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000840)="efcab3d7af9fc687c5afec709edf9556427d4e4b8d3440e76a455c7346e4b5b8c136cf3e09721c635af8eefdefedaba11513ca24cfe768a220a6d83bae26934dc2661d5e9fc5b7f6cedc8f11970691eca06bb8de36f852b891281f1a1638a1aef801ed9e3958355df3d0efa83cabe5700dff261ec8fd13ba93c262d35f9bac31e5ef41b3b54c99309011a541c8616f1731535a0db98e1925da654eeb5bf3835321749ccd4b34ad480c6ed383334f30615d1bf913cfc6c7ed05a47952bfa72e", 0xbf}, {0x0}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x2, [@local]}, @lsrr={0x83, 0x7, 0xce, [@broadcast]}, @end, @noop, @rr={0x7, 0x7, 0x4, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x3, 0x7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x3}, {[@remote]}, {[@loopback], 0x2}, {[@multicast1], 0x80}, {[], 0x3f}]}, @timestamp={0x44, 0xc, 0x7f, 0x1, 0xc, [{[@loopback], 0x3f}]}, @rr={0x7, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0xe, [{[@remote], 0x1000}]}, @ra={0x94, 0x6, 0x96}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @local, @empty, @empty]}, @ssrr={0x89, 0x1f, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @empty, @rand_addr=0x6, @multicast1]}, @ra={0x94, 0x6, 0x3ff}]}}}], 0xa8}}], 0x3, 0x0)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0xc36d, 0x0, 0xad5, 0x17, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r4, 0x0, 0x7fffffa7)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000900), 0xfffffcec)
sendfile(r5, r1, 0x0, 0xffffffff)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5dd1ef64a1f2b026b13e8c4268641617efa813c65bce54b2ef2a1dd6e15e4ba5")
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)

17:54:49 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:49 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

[ 1006.683313][   T26] audit: type=1800 audit(1572890089.675:134): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16609 res=0
[ 1006.714913][   T26] audit: type=1804 audit(1572890089.675:135): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/22/file0" dev="sda1" ino=16609 res=1
[ 1006.797088][   T26] audit: type=1804 audit(1572890089.785:136): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir292712186/syzkaller.R1MfXd/22/file0" dev="sda1" ino=16609 res=1
[ 1007.056584][T12603] overlayfs: workdir and upperdir must reside under the same mount
[ 1007.231236][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1007.237101][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1007.390968][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1007.396946][    C1] protocol 88fb is buggy, dev hsr_slave_1
17:54:51 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:51 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000a0149020105000000005d8e9078ac141400ac1414bb01890b017f000001e00000014404009300004e2204f1907804faf6ad0040ac8b3ca94559b2581eed3d2a5ebf5ef31e52e1db11604e2b49e0b787582e7466f04f38d8c4ead6483b937e78189ed652d24dfa8abeffff281ab1e190155d2db43ff0d725aebe1107be1b5472bd7e20b5a5683179b002151c0cf8a819d6caf83802ff75523bf47a12392d7f06f5ae231b0cc6c4a3e0e3bfe2283b683c63d26ee76f8c926af1aa8de97491a975b77723bb1db260844c0565908c96f97eeec5fb5fd2e3b18a9911c2f7aa703fd5b62be1ed338fb019cc134c050cde1d33bbfc02bab1cdfb7469de8f7adf3c0d38a2fb96422e92081e88e3006471ac60389a659486a604c4b96a4db8a92d1b832b57dec0c50897a510b47e2ac5f4bc02097b4b0841094c060589007856b05283371f3f31c422803fe7236206a9a9ed54ada5ed19767df4af7885914b2a0f1197828d22abe8704072913868066136208c22afe0261c421f10d6b359a685b8005e41822eb3592e325f68"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:51 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

17:54:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

17:54:51 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[ 1008.954859][T12622] overlayfs: conflicting lowerdir path
[ 1008.991022][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1008.996810][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1009.016944][T12615] overlayfs: conflicting lowerdir path
[ 1009.317348][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1009.330788][    C0] protocol 88fb is buggy, dev hsr_slave_1
17:54:52 executing program 5:
add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0x8f, r0)
request_key(&(0x7f0000000980)='dns_resolver\x00', &(0x7f0000000840)={'\x00\x97\xdf', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0)
r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000300)='\xff\x03\x00\x00\x11\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
close(0xffffffffffffffff)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r6, 0x200004)
sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x1, {0x4, 0x0, 0x80000000, 0x3}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000)
syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000)
fsmount(0xffffffffffffffff, 0x0, 0x7)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @loopback}})
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @local}, &(0x7f00000003c0)=0xc)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x40fdf)

17:54:52 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:54:52 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x412)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1c0, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

17:54:54 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0))

17:54:54 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

17:54:54 executing program 5:
add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0x8f, r0)
request_key(&(0x7f0000000980)='dns_resolver\x00', &(0x7f0000000840)={'\x00\x97\xdf', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0)
r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000300)='\xff\x03\x00\x00\x11\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
close(0xffffffffffffffff)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r6, 0x200004)
sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x1, {0x4, 0x0, 0x80000000, 0x3}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000)
syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000)
fsmount(0xffffffffffffffff, 0x0, 0x7)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @loopback}})
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @local}, &(0x7f00000003c0)=0xc)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x40fdf)

17:54:54 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x412)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1c0, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

17:55:03 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x0, 0x0, [0x101]})
write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x109)
getxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)=""/211, 0xd3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000700)={{0xa, 0x0, 0x8, 0x2, 'syz1\x00', 0x401}, 0x2, 0x500, 0x2, 0x0, 0x2, 0x6, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f00000002c0)=['\x00', 'security[nodevsecurity\x00'], 0x18, [], [0x0, 0x7eaa, 0x1, 0x2]})
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

17:55:03 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4)
r2 = dup3(r1, r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
sendto$inet(r1, &(0x7f0000000300)="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", 0x6c1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

17:55:03 executing program 5:
add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0x8f, r0)
request_key(&(0x7f0000000980)='dns_resolver\x00', &(0x7f0000000840)={'\x00\x97\xdf', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0)
r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000300)='\xff\x03\x00\x00\x11\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
close(0xffffffffffffffff)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r6, 0x200004)
sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x1, {0x4, 0x0, 0x80000000, 0x3}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000)
syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000)
fsmount(0xffffffffffffffff, 0x0, 0x7)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @loopback}})
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @local}, &(0x7f00000003c0)=0xc)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x40fdf)

17:55:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x412)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1c0, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

17:55:03 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)

17:55:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, 0x0)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x400452c8, 0x400068)
unshare(0x40000000)
pipe(0x0)

17:55:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x412)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1c0, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

17:55:03 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

17:55:03 executing program 5:
add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0x8f, r0)
request_key(&(0x7f0000000980)='dns_resolver\x00', &(0x7f0000000840)={'\x00\x97\xdf', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0)
r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000300)='\xff\x03\x00\x00\x11\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
close(0xffffffffffffffff)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r6, 0x200004)
sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x1, {0x4, 0x0, 0x80000000, 0x3}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000)
syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000)
fsmount(0xffffffffffffffff, 0x0, 0x7)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @loopback}})
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @local}, &(0x7f00000003c0)=0xc)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x40fdf)

[ 1020.357770][T12668] bridge0: port 3(gretap0) entered blocking state
17:55:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)

[ 1020.401427][T12668] bridge0: port 3(gretap0) entered disabled state
[ 1020.446244][T12668] device gretap0 entered promiscuous mode
[ 1020.483236][T12668] bridge0: port 3(gretap0) entered blocking state
[ 1020.490227][T12668] bridge0: port 3(gretap0) entered forwarding state
17:55:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
dup2(r0, r1)

17:55:03 executing program 1:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)

[ 1020.589068][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:10 executing program 0:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYRES64], 0xfffffea6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r3 = accept(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
splice(r0, 0x0, r3, 0x0, 0x80000000b, 0x0)

17:55:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:10 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
dup2(r0, r1)

17:55:10 executing program 4:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

17:55:10 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

17:55:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
dup2(r0, r1)

17:55:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1027.464977][T12700] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:10 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

17:55:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
dup2(r0, r1)

17:55:10 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

[ 1027.814586][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1033.567773][T12729] bridge0: port 3(gretap0) entered blocking state
[ 1033.574429][T12729] bridge0: port 3(gretap0) entered disabled state
[ 1033.588756][T12729] device gretap0 entered promiscuous mode
[ 1033.595935][T12729] bridge0: port 3(gretap0) entered blocking state
[ 1033.602536][T12729] bridge0: port 3(gretap0) entered forwarding state
17:55:16 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:16 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:16 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

[ 1033.885365][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:19 executing program 4:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

17:55:19 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:19 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:19 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:19 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:26 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:26 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:26 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:26 executing program 1:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:28 executing program 5:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:28 executing program 4:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0xffffff41}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d07d15a7f896122593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

17:55:28 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:28 executing program 2:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:28 executing program 1:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:29 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:29 executing program 2:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:29 executing program 1:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:31 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x80)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x48181)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100))
mq_timedsend(r2, 0x0, 0x2d1, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100))
r4 = syz_open_pts(r3, 0x0)
write(r4, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x6)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140))

17:55:31 executing program 5:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:31 executing program 1:
mlockall(0x8)

17:55:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000000e0607051dfffd946fa2830020200a0009000100071d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0xc)
sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0)

[ 1048.230531][T12820] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
17:55:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000001500)='\x00', 0x1)

17:55:40 executing program 2:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:40 executing program 3:
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="3058100af10cb8b56c9606987fe808d672bd136840d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a939b4fd2672693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b269", 0x5a, 0xfffffffffffffffd)

17:55:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r1, 0xfffffffffffffffc, 0x0)
write$P9_RXATTRWALK(r1, 0x0, 0x0)

17:55:40 executing program 5:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

17:55:40 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x19)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@local}}, 0xe8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1039], 0x18)
setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000440)={@multicast2, @local}, 0xc)

[ 1057.355772][T12837] ==================================================================
[ 1057.363923][T12837] BUG: KCSAN: data-race in complete_signal / do_group_exit
[ 1057.371106][T12837] 
[ 1057.373435][T12837] read to 0xffff88811ad13ab4 of 4 bytes by task 12828 on cpu 1:
[ 1057.381070][T12837]  do_group_exit+0x7b/0x1c0
[ 1057.385718][T12837]  __x64_sys_exit_group+0x2e/0x30
[ 1057.390741][T12837]  do_syscall_64+0xcc/0x370
[ 1057.395252][T12837]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1057.401126][T12837] 
[ 1057.403451][T12837] write to 0xffff88811ad13ab4 of 4 bytes by task 12837 on cpu 0:
[ 1057.411162][T12837]  complete_signal+0x530/0x5e0
[ 1057.415920][T12837]  __send_signal+0x5ea/0x870
[ 1057.420501][T12837]  send_signal+0x224/0x2b0
[ 1057.424913][T12837]  do_send_sig_info+0x5f/0xc0
[ 1057.429586][T12837]  send_sig+0x5f/0x80
[ 1057.433572][T12837]  sk_stream_error+0xa3/0xe0
[ 1057.438157][T12837]  tcp_sendmsg_locked+0x162e/0x1fb0
[ 1057.443342][T12837]  tcp_sendmsg+0x39/0x60
[ 1057.447578][T12837]  inet6_sendmsg+0x6d/0x90
[ 1057.451992][T12837]  sock_sendmsg+0x9f/0xc0
[ 1057.456320][T12837]  sock_write_iter+0x16b/0x210
[ 1057.461078][T12837]  new_sync_write+0x388/0x4a0
[ 1057.465747][T12837]  __vfs_write+0xb1/0xc0
[ 1057.469985][T12837]  vfs_write+0x18a/0x390
[ 1057.474220][T12837]  ksys_write+0xd5/0x1b0
[ 1057.478455][T12837]  __x64_sys_write+0x4c/0x60
[ 1057.483042][T12837]  do_syscall_64+0xcc/0x370
[ 1057.487542][T12837]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1057.493414][T12837] 
[ 1057.495731][T12837] Reported by Kernel Concurrency Sanitizer on:
[ 1057.501897][T12837] CPU: 0 PID: 12837 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0
[ 1057.509774][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1057.519816][T12837] ==================================================================
[ 1057.527865][T12837] Kernel panic - not syncing: panic_on_warn set ...
[ 1057.534448][T12837] CPU: 0 PID: 12837 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0
[ 1057.542327][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1057.552369][T12837] Call Trace:
[ 1057.555659][T12837]  dump_stack+0xf5/0x159
[ 1057.559899][T12837]  panic+0x210/0x640
[ 1057.563796][T12837]  ? vprintk_func+0x8d/0x140
[ 1057.568392][T12837]  kcsan_report.cold+0xc/0xe
[ 1057.572983][T12837]  kcsan_setup_watchpoint+0x3fe/0x410
[ 1057.578354][T12837]  __tsan_unaligned_write4+0x143/0x1f0
[ 1057.583811][T12837]  complete_signal+0x530/0x5e0
[ 1057.588665][T12837]  __send_signal+0x5ea/0x870
[ 1057.593257][T12837]  send_signal+0x224/0x2b0
[ 1057.597674][T12837]  ? __lock_task_sighand+0xa4/0xe0
[ 1057.602799][T12837]  do_send_sig_info+0x5f/0xc0
[ 1057.607477][T12837]  send_sig+0x5f/0x80
[ 1057.611456][T12837]  sk_stream_error+0xa3/0xe0
[ 1057.616045][T12837]  tcp_sendmsg_locked+0x162e/0x1fb0
[ 1057.621244][T12837]  ? finish_task_switch+0x7b/0x260
[ 1057.626361][T12837]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1057.632608][T12837]  ? aa_sk_perm+0x1a4/0x450
[ 1057.637131][T12837]  ? __local_bh_enable_ip+0x32/0x80
[ 1057.642327][T12837]  tcp_sendmsg+0x39/0x60
[ 1057.646567][T12837]  inet6_sendmsg+0x6d/0x90
[ 1057.650982][T12837]  ? inet6_ioctl+0x140/0x140
[ 1057.655571][T12837]  sock_sendmsg+0x9f/0xc0
[ 1057.659901][T12837]  sock_write_iter+0x16b/0x210
[ 1057.664670][T12837]  new_sync_write+0x388/0x4a0
[ 1057.669351][T12837]  __vfs_write+0xb1/0xc0
[ 1057.673592][T12837]  vfs_write+0x18a/0x390
[ 1057.677834][T12837]  ksys_write+0xd5/0x1b0
[ 1057.682077][T12837]  __x64_sys_write+0x4c/0x60
[ 1057.686670][T12837]  do_syscall_64+0xcc/0x370
[ 1057.691172][T12837]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1057.697054][T12837] RIP: 0033:0x45a219
[ 1057.700956][T12837] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1057.721435][T12837] RSP: 002b:00007f842e146c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1057.729937][T12837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[ 1057.737911][T12837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 1057.745874][T12837] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1057.753837][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f842e1476d4
[ 1057.761799][T12837] R13: 00000000004ca886 R14: 00000000004e2b10 R15: 00000000ffffffff
[ 1058.928704][T12837] Shutting down cpus with NMI
[ 1058.934892][T12837] Kernel Offset: disabled
[ 1058.939217][T12837] Rebooting in 86400 seconds..